OSV ID
MAL-2026-6405
Ecosystem
npm
Summary
On require, index.js silently bootstraps a full Python runtime on the installer's machine — first via winget install -e --id Python.Python.3.12 --silent , falling back to downloading python-3.12.3-amd64.exe from python.org and executing it with /quiet InstallAllUsers=0 PrependPath=1 — then silently pip install s pyautogui, keyboard, mss, pillow, pyperclip, and uiautomation. It then spawns pointer.py, which installs system-wide hotkeys (Ctrl+C, Alt+S, F8/F9/F10, Alt+M, Ctrl+Q), creates a topmost transparent always-on-top Tk window using overrideredirect(True) to hide from the user, continuously monitors clipboard contents, and on hotkeys captures full-monitor screenshots and on-screen text via UI Automation. Captured clipboard text and base64-encoded screenshots are POSTed to a hardcoded destination at https://iq-overlay-pointer.vercel.app/api . The agent also exposes a mash_callback mode that hooks keyboard.on_press with suppress=True and substitutes attacker-supplied characters via pyautogui.write(char) , injecting keystrokes into whatever window is focused. The package's declared purpose — "System binary configuration tool" by author "SysDev" with keywords system/binary/util/config — does not match any of this behavior; the metadata is a cover story for a screen/clipboard surveillance and remote-keystroke-injection agent.
Source: amazon-inspector (b22a9450e70ba1095097d2779ad6da01c111c37e940d890fbfc21d1aeb6a0f11)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.