Skip to content

Back to the catalog

Xygeni Malicious Code Digest 82
xygeni.ioarticle

Xygeni Malicious Code Digest 82

Xygeni's weekly malicious-package digest covers 206 confirmed malicious npm/PyPI/OpenVSX packages between July 31 and August 7, 2026. Highlights include wormgpt-cli and gpt-terminal-cli on npm (branded after the real WormGPT dark-LLM tool, nine versions published in one day), a dependency-confusion cluster of nine packages impersonating crypto wallet/signing libraries (ledger-lib, trezor-lib, bip32-js, ethers-lib, python-bitcoinlib, ckcc-protocol, hwi-lib, mnemonic-utils, ethereum-sign-utils), and QuietPolyfill — a three-stage dropper hidden in a beaver-ui-*/accounts-* package cluster that executes on require() rather than via an install script, so --ignore-scripts does not block it.

TL;DR Weekly digest of 206 malicious npm/PyPI/OpenVSX packages, including WormGPT-branded npm packages, a crypto-wallet-library dependency-confusion cluster, and QuietPolyfill, a require()-triggered dropper that evades --ignore-scripts.
Open original ↗

Organisations named here

  • accounts-*
  • akrai
  • beaver-ui-*
  • iphouse
  • markscan

Technologies named here

  • npm registry
  • Xygeni Malicious Code Digest
  • PyPI
  • Xygeni Early Malware Warning
  • Xygeni Open Source Security platform
  • Open VSX
  • wormgpt-cli
  • gpt-terminal-cli
  • ledger-lib
  • trezor-lib
  • bip32-js
  • ethers-lib
  • python-bitcoinlib
  • ckcc-protocol
  • hwi-lib
  • mnemonic-utils
  • ethereum-sign-utils
  • beaver-ui-* package cluster
  • accounts-* package cluster
  • npm

Techniques named here

  • Brand impersonation of known attacker tools
  • Dependency confusion
  • Rapid/automated version publishing
  • require-triggered payload execution
  • Multi-stage dropper
  • Rapid unpublish-and-reappear evasion

Threat actors named here

  • WormGPT
  • QuietPolyfill
  • markscan, akrai, and iphouse lookalike cluster
  • Cryptocurrency wallet impersonation cluster

Related in Supply Chain