Encyclopedia
npm◆ MEDIUMtyposquat⚠ ACTIVE THREAT

babelcli

First seen: Sep 26, 2026 0 viewsMimics: babel-cli
Share threatHN
Threat Description

A typosquat of babel-cli from the August 2017 npm typosquat campaign (same wave as crossenv). The package impersonated the popular Babel CLI with a concatenated name to trick developers into installing it, and carried the campaign's data-collection postinstall payload.

AI Hallucination Analysis
Unlikely AI Hallucination0%
Known to be hallucinated by: None - this is a real typosquat, not an AI hallucination.
Remediation Guide
  1. Remove babelcli and install the legitimate @babel/cli or babel-cli. 2. Rotate npm tokens exposed during the window. 3. Review dependencies for typosquatted names. 4. Use package-lock with hash verification.
View on registry
Quick Facts
Ecosystem
npm
Risk Level
MEDIUM
Type
typosquat
Status
ACTIVE
Legitimate Package
babel-cli
Hallucination Confidence
0%
Check My Project
Scan for this package