{"id":"MAL-2026-18373","kind":"package","aliases":["MAL-2026-18373"],"related":[],"title":"Malicious code in @zmtcdn/ui (npm)","description":"@zmtcdn/ui 9999.0.0 and 9999.0.7 are dependency-confusion packages with an empty `index.js` and a description of \"Security research PoC\". Their postinstall script runs `node postinstall.js` on npm install, which POSTs the hostname, username, platform, working directory and the names of all environment variables to `https://www.hinny.shop/api`. They were published by the npm account kill_shs, which also published @zmtcdn/components with the same script.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"@zmtcdn/ui","fixed":[],"affected":"= 9999.0.0; = 9999.0.7","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-28T07:27:15+00:00","first_seen_at":"2026-10-29T09:53:35+00:00","triaged_at":"2026-10-29T09:53:53+00:00","updated_at":"2026-10-29T09:56:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-18373':8A,11A '-2026':7A,10A '/api':62C '9999.0.0':16C '9999.0.7':18C 'account':69C 'also':73C 'code':2A 'confus':22C 'depend':21C 'dependency-confus':20C 'descript':30C 'directori':51C 'empti':26C 'environ':57C 'hostnam':47C 'index.js':27C 'instal':43C 'kill':70C 'mal':6A,9A 'malici':1A,13B 'name':54C 'node':39C 'npm':5A,42C,68C 'packag':14B,23C 'platform':49C 'poc':34C 'post':45C 'postinstal':36C 'postinstall.js':40C 'publish':65C,74C 'research':33C 'run':38C 'script':37C,79C 'secur':32C 'shs':71C 'usernam':48C 'variabl':58C 'work':50C 'www.hinny.shop':61C 'www.hinny.shop/api':60C 'zmtcdn/components':75C 'zmtcdn/ui':4A,12A,15C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"first_public_at":"2026-10-28T07:27:15+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18373","url":"https://osv.dev/vulnerability/MAL-2026-18373","severity":"critical","published_at":"2026-10-28T07:27:15+00:00","modified_at":"2026-10-29T09:15:04+00:00","first_seen_at":"2026-10-29T09:53:35+00:00","fetched_at":"2026-10-29T09:53:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}