MAL-2026-12484 Malicious code in trailserver (npm)
Malicious package
Published
MAL-2026-12484 is a malicious package: trailserver (npm). Every version was published to cause harm.
Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.
Reference: https://insights.sbomify.com/MAL-2026-12484/ (Markdown: https://insights.sbomify.com/MAL-2026-12484/index.md)
- Package
- trailserver
- Registry
- npm
What is MAL-2026-12484?
MAL-2026-12484 is a malicious package in trailserver, published on 5 Aug 2026.
Official description
The package's declared main entry launcher.js invokes launch() at top level, so require('trailserver') triggers system-level installation of Python (via winget, or by downloading python-3.12.3-amd64.exe from python.org and running the installer silently), pip-installs pyperclip/keyboard/pyautogui/pillow/requests, and spawns a bundled Python script (client/noderzero.py). That script continuously monitors the clipboard and captures full-screen screenshots (plus OCR-selected regions) and POSTs the raw text and base64-encoded JPEG images to the hardcoded URL https://trailserver.vercel.app/api; the destination is not caller-configurable. The Python payload additionally registers global keyboard hooks, hides its UI via overrideredirect and a transparent-color topmost overlay, auto-types content into other applications through pyautogui, and exposes a ctrl+q panic-exit. Installing or importing this package delivers a stealth clipboard/screen/keystroke surveillance agent to the installer's machine and streams its output to an author-controlled endpoint.
What should I do about MAL-2026-12484?
Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.