Which versions of ai-gen-ai-opt-in are malicious?

The following npm versions of ai-gen-ai-opt-in are flagged malicious: 99.0.0. Treat any of these as compromised.

How do I remediate ai-gen-ai-opt-in if I installed it?

ai-gen-ai-opt-in is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.

I already installed ai-gen-ai-opt-in — how do I know if it already compromised me?

If ai-gen-ai-opt-in was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is ai-gen-ai-opt-in part of a known attack campaign?

Yes — ai-gen-ai-opt-in is associated with the IN-MAL-2026-008077 campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find ai-gen-ai-opt-in across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for ai-gen-ai-opt-in (version 99.0.0).

Malicious package

ai-gen-ai-opt-innpm

Advisory published Jul 8, 2026Updated Jul 8, 2026

ai-gen-ai-opt-in is a confirmed malicious npm package (MAL-2026-6990) that steals credentials and exfiltrates sensitive data (malicious version 99.0.0). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in ai-gen-ai-opt-in (npm)

MAL-2026-6990

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

npm uninstall ai-gen-ai-opt-in

What this malware does

[email protected] declares a postinstall hook (postinstall.js) that runs automatically on npm install. The script collects the installer's hostname (os.hostname()), OS username (os.userInfo().username), and public IP/geo/ISP data (fetched from ip-api.com over HTTPS), then encodes those values and issues a DNS lookup for a subdomain of an attacker-controlled Burp Collaborator-style callback host (p1r2d74iwjk057raam6myf7e258wzkt8i.oastify.com). This is a covert out-of-band DNS exfiltration channel that leaks installer identity and location data to a third party on every install, with no legitimate documented purpose.

Malicious versions

1 flagged

99.0.0

Indicators of compromise (SHA-256)

a34dae027378ca986d5e99aa7c9ffc5efe590e4697e1255970ce713f6d309e74

Detection & response playbook

Credential / info stealer

Find it
Search your lockfiles and build artifacts for ai-gen-ai-opt-in (version 99.0.0).
If you installed it — respond
ai-gen-ai-opt-in is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.
Did it already run?
If ai-gen-ai-opt-in was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. ai-gen-ai-opt-in on npm has been identified as a malicious package (version 99.0.0 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

IN-MAL-2026-008077

References

npmjs.com

Credits

Amazon Inspector · finder

Detect & block this

O3 blocks ai-gen-ai-opt-in-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the credential exfiltration and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database