NIST deprecates RSA-2048 from 2030. Find every one of them before attackers do.
Malicious package

rollup-plugin-polyfill-holdnpm

Advisory published Updated

rollup-plugin-polyfill-hold is a confirmed malicious npm package (MAL-2026-11479) that executes malicious code on install (malicious version 1.0.5). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in rollup-plugin-polyfill-hold (npm)

MAL-2026-11479
Immediate action
Remove the package, then rotate any secrets the build/runtime could reach.
npm uninstall rollup-plugin-polyfill-hold

What this malware does

The package presents itself as a rollup plugin / CDN icon-asset fetcher but its exported getPlugin, setPlugin, and getPluginExten functions issue HTTPS requests to a hardcoded endpoint at rest-icon-handler.store/icons/103 and /icons/389 and pass the JSON-parsed response body to eval(), giving the endpoint owner arbitrary JavaScript execution in the caller's Node process. The destination URL is assembled from split constants (protocol/separator/subdomain/domain/path) rather than appearing as a single string, while a decoy setDefaultModule references legitimate CDN providers (cloudflare/fastly/akamai) that are never contacted by the eval path. getPlugin additionally schedules getPluginExten via setTimeout so the fetch-and-eval recurs. The eval-of-remote-content behavior is not disclosed by the package's advertised purpose and the endpoint is unrelated to any documented CDN.

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

Malicious versions

1 flagged
1.0.5

Indicators of compromise (SHA-256)

55b9bd8da2181c7be27563d32bcd51eeda41395e0a1660c736840cc94e3613b1
57956044a2c40ab32e789cd46c26ab03304478179d15897f97c29d12cc838e8a

Detection & response playbook

Malicious package

  1. Find it

    Search your lockfiles and build artifacts for rollup-plugin-polyfill-hold (version 1.0.5).

  2. If you installed it — respond

    Remove rollup-plugin-polyfill-hold from your project and lockfile, then assume any secrets accessible to the build or runtime were exposed: rotate API keys, tokens, and credentials, and audit for unexpected outbound activity or persistence.

  3. Did it already run?

    If rollup-plugin-polyfill-hold was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. rollup-plugin-polyfill-hold on npm has been identified as a malicious package (version 1.0.5 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

GHSA-7p2c-jxw4-jxvvIN-MAL-2026-011200

References

Credits

  • Amazon Inspector · finder

Detect & block this

O3 blocks rollup-plugin-polyfill-hold-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the malicious outbound activity and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database
rollup-plugin-polyfill-hold (npm) malicious package — MAL-2026-11479 | O3 Security