{"id":"MAL-2026-18062","kind":"package","aliases":["MAL-2026-18062"],"related":[],"title":"Malicious code in sc-wizard (npm)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (b6626c24ff3f61de611b5962b6a1b21a5f694dfb32059e31f956875dc9d1db02)\npackage.json declares the package's only dependency `ltidisafe` as a direct HTTPS tarball URL (`https://ltidi.storage.googleapis.com/depenconf/ltidisafe-4.0.1.tgz`) rather than a registry version range. On `npm install`, npm fetches that URL and installs whatever bytes it returns, executing any lifecycle scripts contained in the fetched tarball — unpinned, integrity-unchecked, and outside the npm registry's publish controls. The shipped `index.js` is an empty stub, so the manifest-declared off-registry URL is effectively the entire install-time payload. The dependency source is a mutable third-party storage bucket; whoever controls that URL controls code running on the installer's machine at install time. The high version number (`99.9.1`) relative to a short, generic name is consistent with a dependency-confusion lure intended to win resolution against an internal `sc-wizard` package.\n\n## Source: ossf-package-analysis (54691cc130e614ee031186f7e646c3e6076efad6105a6e9cad68f62aa736516b)\nThe OpenSSF Package Analysis project identified 'sc-wizard' @ 99.9.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"sc-wizard","fixed":[],"affected":"= 99.9.1","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-20T03:31:02+00:00","first_seen_at":"2026-10-26T20:51:52+00:00","triaged_at":"2026-10-26T21:02:03+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-18062':10A,13A '-2026':9A,12A '/depenconf/ltidisafe-4.0.1.tgz':49C '54691cc130e614ee031186f7e646c3e6076efad6105a6e9cad68f62aa736516b':175C '99.9.1':144C,185C 'activ':203C 'amazon':30C 'amazon-inspector':29C 'analysi':174C,179C 'associ':200C 'b6626c24ff3f61de611b5962b6a1b21a5f694dfb32059e31f956875dc9d1db02':32C 'bucket':124C 'byte':66C 'code':2A,130C 'communic':196C 'confus':157C 'consid':191C 'consist':152C 'contain':73C 'control':89C,126C,129C 'declar':34C,101C 'depend':39C,115C,156C 'dependency-confus':155C 'detail':21C 'direct':43C 'domain':199C 'edit':24C 'effect':107C 'empti':95C 'entir':109C 'execut':69C 'fetch':60C,76C 'generic':149C 'high':141C 'https':44C 'identifi':181C 'index.js':92C 'inspector':31C 'instal':58C,64C,111C,134C,138C 'install-tim':110C 'integr':80C 'integrity-uncheck':79C 'intend':159C 'intern':165C 'lifecycl':71C 'line':27C 'ltidi.storage.googleapis.com':48C 'ltidi.storage.googleapis.com/depenconf/ltidisafe-4.0.1.tgz':47C 'ltidisaf':40C 'lure':158C 'machin':136C 'mal':8A,11A 'malici':1A,17B,188C,192C,202C 'manifest':100C 'manifest-declar':99C 'mutabl':119C 'name':150C 'npm':7A,57C,59C,85C,186C 'number':143C 'off-registri':102C 'openssf':177C 'ossf':172C 'ossf-package-analysi':171C 'outsid':83C 'packag':18B,36C,169C,173C,178C,195C 'package.json':33C 'parti':122C 'payload':113C 'per':19C 'project':180C 'publish':88C 'rang':55C 'rather':50C 'registri':53C,86C,104C 'relat':145C 'resolut':162C 'return':68C 'run':131C 'sc':5A,15A,167C,183C 'sc-wizard':4A,14A,166C,182C 'script':72C 'ship':91C 'short':148C 'sourc':20C,28C,116C,170C 'storag':123C 'stub':96C 'tarbal':45C,77C 'third':121C 'third-parti':120C 'time':112C,139C 'uncheck':81C 'unpin':78C 'url':46C,62C,105C,128C 'version':54C,142C 'whatev':65C 'whoever':125C 'win':161C 'wizard':6A,16A,168C,184C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T03:31:02+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18062","url":"https://osv.dev/vulnerability/MAL-2026-18062","severity":"critical","published_at":"2026-10-20T03:31:02+00:00","modified_at":"2026-10-25T15:30:04+00:00","first_seen_at":"2026-10-26T20:51:52+00:00","fetched_at":"2026-10-26T20:51:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}