---
id: "GHSA-vx4h-jq4c-3vg2"
page: "https://infrastack.ai/live/GHSA-vx4h-jq4c-3vg2"
kind: "package"
aliases: ["GHSA-vx4h-jq4c-3vg2", "MAL-2026-11205"]
title: "Malicious code in redis-type-xyz (npm)"
severity: "critical"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "redis-type-xyz", "note": "all versions", "fixed": [], "affected": "", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["malicious", "package"]
not_affected_if: []
published_at: "2026-06-17T07:56:44+00:00"
first_seen_at: "2026-11-11T17:28:35+00:00"
updated_at: "2026-11-11T17:28:36+00:00"
sources: [{"source": "osv-malicious", "url": "https://osv.dev/vulnerability/MAL-2026-11205", "first_seen_at": "2026-11-11T17:28:35+00:00"}]
exploit_sources: []
---

# Malicious code in redis-type-xyz (npm)

Link for people: https://infrastack.ai/live/GHSA-vx4h-jq4c-3vg2 (this .md is for agents)

## Affected

- npm:redis-type-xyz affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-11T17:28:35+00:00 osv-malicious https://osv.dev/vulnerability/MAL-2026-11205

## From the sources

The redis-type-xyz package is an empty impersonation of Redis OM. It copies the redis-om-node repository, homepage, author, documentation, and declared dist/index.js entry point, but the published archive does not contain the declared dist directory or any usable implementation. Its dependency list replaces the legitimate ulid package used by Redis OM with ulid-xyz@^2.12.2.

Installing redis-type-xyz therefore installs the known-malicious ulid-xyz dependency. The ulid-xyz postinstall hook launches a detached background agent that decodes a WebSocket and HTTP C2 endpoint at 95.216.232.162:8010. The agent supports system information collection, drive and directory enumeration, removal, and deploy_binary tasks. deploy_binary writes attacker-supplied Base64 content to disk, registers persistence on Windows, macOS, or Linux, and launches the replacement agent. The malicious ulid-xyz dependency is independently tracked as MAL-2026-6672. redis-type-xyz is a separate delivery package that intentionally substitutes the known-malicious dependency into an otherwise copied Redis OM manifest.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (c9c8e39757a709b00e180a43959cd14e8cd36922e2f3b9a19f75046bd79e767c)
Package is published as 'redis-type-xyz' but its README markets itself as 'redis-type-os', uses Redis branding/logo, and declares its repository as github:redis/redis-om-node — impersonating Redis's official redis-om library. The package's package.json declares main as 'dist/index.js' and types as './dist/index.d.ts', but no dist/ directory is present in the tarball, so require('redis-type-xyz') will throw MODULE_NOT_FOUND. The package is not a functional library. Its only on-install effect is dependency resolution: it declares a runtime dependency on 'ulid-xyz' (^2.12.2), a name-confusion variant of the legitimate 'ulid' package. Any consumer installing redis-type-xyz will transitively pull ulid-xyz from an unrelated publisher. The naming pattern (impersonation of a well-known library + a sibling 'xyz'-suffixed dep mirroring a popular package) is a name-confusion / namespace-lure shape, but the contents of ulid-xyz itself were not analyzed in this record and no installer-harm payload (exfiltration, install hooks, credential reads) is observed in the parent package's tarball. Routing to human review to assess intent of the ulid-xyz transitive and the impersonation pattern.

## Source: ghsa-malware (71db19ac3ec47ea1efc7f19a2f75fddfbc9d68f3bd0da53018f666da5616dbae)
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_