18 Malicious npm Packages Hit Alibaba Developers with RAT
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Socket researchers identified 18 malicious npm packages impersonating private Alibaba-scoped (@ali) packages, including "lib-mtop," which sat dormant from November 2023 until v1.0.1–v1.0.3 were pushed in March and April.
- Maintainer "ch4ce" published four companion packages (aone-kit, aone-kit-cli, aone-sandbox, local-config-parser), with the first three acting as empty wrappers declaring the private @ali-scoped packages as dependencies to activate the attack chain.
- The attack architecture splits malicious loader logic across a multi-layer dependency tree — 10 top-layer lure packages depend on "smart-config-manager," which bridges to lower-layer packages that fetch a rule engine from GitHub and download OS-specific payloads from a domain masquerading as Alibaba.
- The cross-platform RAT exhibits distinct behaviors per OS: on Windows it terminates and trojanizes Alilang enterprise security software; on Linux it runs a binary from /tmp and deletes it post-execution; on macOS it injects into ~/.zshrc and installs a 10-minute Launch Agent.
- The final-stage backdoor supports command execution, arbitrary file upload/download, host reconnaissance, payload staging, and lateral movement, and persists by injecting code into enterprise collaboration apps DingTalk, Wukong, and Qoder.
- Attribution clues include Chinese-language comments in the source code and GitHub commits timestamped in UTC+08:00, leading researcher Karlo Zanki to assess the campaign as likely industrial espionage by a Chinese-speaking actor targeting Chinese-speaking developers.
- Users of any of the 18 packages should assume compromise, rotate sensitive credentials from a clean machine, and audit developer systems for suspicious activity, per Socket's advisory.
Why it matters: The campaign turns npm's dependency resolution into an attack vector: any developer environment with access to the legitimate private @ali packages installs the trojan silently alongside the expected software, giving attackers a persistent foothold inside Alibaba Group contractors and partners for industrial espionage.
