The Open Source Malware (OSM) archive, human-verified through four-stage community review, logged a fresh cluster of critical malicious npm packages on 4 November, dominated by typosquats of AI developer-tool installers: codex-setup, chatgpt-setup, claude-desktop-setup, @decoopus/chatgpt-setup, @decoopus/claude-setup (1.0.13) and related names described as infostealers with code-execution and data-exfiltration behaviours at install time, some tied to compromised publisher accounts. The same batch included packages linked to DPRK campaigns (zxhgssiyluwxchn, flagged against the "Contagious Interview" campaign, and birch-css-utils, tied to Famous Chollima/UNC5267 "Contagious Interview 2026"), plus tailwind-input-kit, whose advisory states any computer running it should be considered fully compromised (OSV MAL-2026-18595). Organisations building internal or CI tooling should validate package provenance, pin versions and scan install-time hooks; the pattern of fake "setup" packages impersonating AI coding assistants has become one of the most active supply-chain vectors for credential theft.

• Source article