Which versions of 3pool-sushibar are malicious?

The following npm versions of 3pool-sushibar are flagged malicious: 1.0.0. Treat any of these as compromised.

How do I remediate 3pool-sushibar if I installed it?

3pool-sushibar establishes remote access, so treat any host that installed it as fully compromised. Isolate the machine, remove the package, rotate all credentials it could reach, and rebuild from a trusted image rather than cleaning in place — a backdoor may have planted additional persistence.

I already installed 3pool-sushibar — how do I know if it already compromised me?

If 3pool-sushibar was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is 3pool-sushibar part of a known attack campaign?

Yes — 3pool-sushibar is associated with the IN-MAL-2026-002166 campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find 3pool-sushibar across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for 3pool-sushibar (version 1.0.0).

Malicious package

3pool-sushibarnpm

Advisory published May 12, 2026Updated May 13, 2026

3pool-sushibar is a confirmed malicious npm package (MAL-2026-3673) that opens a backdoor for remote access (malicious version 1.0.0). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in 3pool-sushibar (npm)

MAL-2026-3673

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

npm uninstall 3pool-sushibar

What this malware does

This package is a dependency-chain dropper. package.json declares 15 undocumented dependencies in three numbered families (web3chain02032*, rusttool0701*, btc202523*) pinned to ^1.1.1, none of which appear in the README that describes a standalone Go miner. The bundled tranpack.sh proves the campaign: an infinite loop that rewrites package.json's name from a ~500-word crypto/DeFi wordlist and runs npm publish, and the current name 3pool-sushibar is an output of that generator. The package itself is non-functional — the declared main entry index.js does not exist — confirming that its only purpose is to pull in attacker-controlled siblings. Two undocumented 22MB Windows.exe binaries with mismatched hashes further contradict the README's source-only build story. Running npm install 3pool-sushibar fetches 15 attacker-controlled packages whose code is one hop away from inspection here; this is direct installer harm via namespace-abuse plus typosquat lure.

Malicious versions

1 flagged

1.0.0

Indicators of compromise (SHA-256)

5112bb2ea3570e56be6525c48ef026624f46dead693e78333696273c911c6c42

Detection & response playbook

Backdoor / remote access

Find it
Search your lockfiles and build artifacts for 3pool-sushibar (version 1.0.0).
If you installed it — respond
3pool-sushibar establishes remote access, so treat any host that installed it as fully compromised. Isolate the machine, remove the package, rotate all credentials it could reach, and rebuild from a trusted image rather than cleaning in place — a backdoor may have planted additional persistence.
Did it already run?
If 3pool-sushibar was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. 3pool-sushibar on npm has been identified as a malicious package (version 1.0.0 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

IN-MAL-2026-002166

References

npmjs.com

Credits

Amazon Inspector · finder

Detect & block this

O3 blocks 3pool-sushibar-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the C2 callback and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database