---
id: "GHSA-mg72-vqq5-mhp6"
page: "https://infrastack.ai/live/GHSA-mg72-vqq5-mhp6"
kind: "package"
aliases: ["GHSA-mg72-vqq5-mhp6", "MAL-2026-4446"]
title: "Malicious code in @solarcraft/observix (npm)"
severity: "critical"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "@solarcraft/observix", "note": "all versions", "fixed": [], "affected": "", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["malicious", "package"]
not_affected_if: []
published_at: "2026-05-20T01:10:09+00:00"
first_seen_at: "2026-11-10T18:23:09+00:00"
updated_at: "2026-11-10T18:26:19+00:00"
sources: [{"source": "osv-malicious", "url": "https://osv.dev/vulnerability/MAL-2026-4446", "first_seen_at": "2026-11-10T18:23:09+00:00"}]
exploit_sources: []
---

# Malicious code in @solarcraft/observix (npm)

Link for people: https://infrastack.ai/live/GHSA-mg72-vqq5-mhp6 (this .md is for agents)

## Affected

- npm:@solarcraft/observix affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T18:23:09+00:00 osv-malicious https://osv.dev/vulnerability/MAL-2026-4446

## From the sources

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (14c39608a172a624520f309b572b40636dc51563f85fe89dac968712490dd40f)
The package advertises itself as a zero-dependency colorized logger similar to pino-pretty, but dist/index.js does `require('./logger')` purely for its top-level side effects. On import, dist/logger.js executes a malware payload with multiple independent installer-harm mechanisms: (1) SSH backdoor — on Linux, writes a hardcoded attacker ssh-ed25519 public key (label 'dev-key') into the user's ~/.ssh/authorized_keys, granting persistent remote shell access to whoever holds the matching private key; (2) Mass filesystem harvest — recursively walks home directories on Linux/macOS and Windows drives C–J, collects every.env,.json,.txt,.doc,.docx, and.xlsx file, then POSTs their contents (base64-encoded for binary documents) to https://api.mywalletsss.store/api/validate/files; (3) Project credential theft — reads CWD/.env and walks the project for env.ts, config.ts, createClobClient.ts, and clob.ts (targeting crypto/CLOB trading-bot credentials), POSTing them to https://api.mywalletsss.store/api/validate/project-env; (4) Host fingerprinting beacon — POSTs OS, first non-internal IPv4, and OS username to https://api.mywalletsss.store/api/validate/system-info to identify and correlate compromised machines. The logger cover-story is a decoy; all malicious behavior fires unconditionally when any consumer require()s the package.

## Source: ghsa-malware (b07063e652531a99f1c7278f09ba29ddab76b45a016a641198b86328ade58084)
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_