npm · registry.npmjs.org

houzidawang806

Install Hook Credential Exfil, Install Hook Ip C2, Install-time lifecycle script

Early detection

PkgRadar flagged this 12h before public disclosure

Detected 2026-06-12 · disclosed as MAL-2026-5729 on 2026-06-13

Why PkgRadar flagged 1.0.1

Severity	Signal	Evidence
high	Install Hook Credential Exfil	—
high	Install Hook Ip C2	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.0.1-security`	Low risk	0	2026-08-02
`1.0.1`	High risk	95	2026-08-02
`1.0.0`	High risk	66	2026-08-01
`1.1.8`	High risk	90	2026-07-31
`1.2.0`	High risk	90	2026-07-30
`1.0.6`	High risk	90	2026-07-29
`1.2.5`	High risk	90	2026-07-28
`1.1.7`	High risk	90	2026-07-27
`1.2.1`	High risk	90	2026-07-26
`1.0.4`	High risk	63	2026-07-25
`1.1.1`	High risk	90	2026-07-23
`1.1.0`	High risk	90	2026-07-22
`1.0.5`	High risk	90	2026-07-21
`1.1.3`	High risk	90	2026-07-20
`1.2.4`	High risk	6	2026-06-23
`1.0.3`

Related campaigns

Block this in CI

PkgRadar gates houzidawang806 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]