Which versions of api-changelly are malicious?

The following npm versions of api-changelly are flagged malicious: 19.2.11. Treat any of these as compromised.

How do I remediate api-changelly if I installed it?

api-changelly establishes remote access, so treat any host that installed it as fully compromised. Isolate the machine, remove the package, rotate all credentials it could reach, and rebuild from a trusted image rather than cleaning in place — a backdoor may have planted additional persistence.

I already installed api-changelly — how do I know if it already compromised me?

If api-changelly was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is api-changelly part of a known attack campaign?

Yes — api-changelly is associated with the IN-MAL-2026-009757, RLMA-2026-05495, RLUA-2026-06064 campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find api-changelly across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for api-changelly (version 19.2.11).

Malicious package

api-changellynpm

Advisory published Jul 12, 2026Updated Sep 1, 2026

api-changelly is a confirmed malicious npm package (MAL-2026-10200) that opens a backdoor for remote access (malicious version 19.2.11). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in api-changelly (npm)

MAL-2026-10200

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

npm uninstall api-changelly

What this malware does

The package declares preinstall: node index.js, which runs automatically on npm install. index.js collects installer identifiers (os.hostname(), os.platform(), os.arch(), os.userInfo() username/uid/gid/shell, home directory, cwd) and executes whoami and id via child_process.exec, capturing their output. The combined JSON payload is POSTed to a hardcoded Burp Collaborator subdomain https://1439tg4d02vixhxuj0gadpml4ca3ytmi.oastify.com/detox56. The package name api-changelly impersonates the Changelly crypto-exchange brand and ships no legitimate functionality — the only behavior is the install-time beacon. This is the canonical dependency-confusion / reconnaissance-beacon shape targeting internal build systems that may resolve a private changelly-family dependency to this public package.

Malicious versions

1 flagged

19.2.11

Indicators of compromise (SHA-256)

a94f4aa368f1838507a78dde78062b740a5853b516d9d32782d0264b539b724c

01027d82cfa168b00fea80a4a7c3ee661ce4abc0dfe6f97598b01e3715359b33

14bcd51efdfdff2213878f806525fa6a4663cdb31c121ee7f8ba93fdfff14933

Detection & response playbook

Backdoor / remote access

Find it
Search your lockfiles and build artifacts for api-changelly (version 19.2.11).
If you installed it — respond
api-changelly establishes remote access, so treat any host that installed it as fully compromised. Isolate the machine, remove the package, rotate all credentials it could reach, and rebuild from a trusted image rather than cleaning in place — a backdoor may have planted additional persistence.
Did it already run?
If api-changelly was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. api-changelly on npm has been identified as a malicious package (version 19.2.11 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

IN-MAL-2026-009757RLMA-2026-05495RLUA-2026-06064

References

Credits

Amazon Inspector · finder
ReversingLabs · finder

Detect & block this

O3 blocks api-changelly-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the C2 callback and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database