Encyclopedia
npm⚠ HIGHtyposquat⚠ ACTIVE THREAT

chalk-cli-color

First seen: Apr 20, 2024 0 viewsMimics: chalk
Share threatHN
Threat Description

Typosquat of 'chalk' banking on the 'cli-color' naming confusion. The package patches chalk's install to write a malicious binary to /usr/local/bin that captures shell history and credentials.

AI Hallucination Analysis
Unlikely AI Hallucination16%
Known to be hallucinated by: n/a (typosquat)
Remediation Guide
  1. Remove 'chalk-cli-color' from your dependencies immediately.
  2. Replace with the legitimate package 'chalk'.
  3. Audit /usr/local/bin for unknown binaries.
  4. Rotate any shell credentials that may have been captured.
Quick Facts
Ecosystem
npm
Risk Level
HIGH
Type
typosquat
Status
ACTIVE
Legitimate Package
chalk
Hallucination Confidence
16%
Check My Project
Scan for this package