{"id":"MAL-2026-18106","kind":"package","aliases":["MAL-2026-18106"],"related":[],"title":"Malicious code in memories-core-web (npm)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (5aa2bc32ff519468287f8a87deeff1349332b710735b9f78ee34ffd46c9511cb)\npackage.json declares a `preinstall` lifecycle script that runs `curl` to a hardcoded webhook.site collector URL (https://webhook.site/b2967b0a-1b24-4670-8ae1-e09e3cf272c4/) with the installer's hostname and username interpolated as query parameters via `$(hostname)` and `$(whoami)`. This fires automatically on `npm install` and transmits installer host identifiers to a third-party collector controlled by whoever provisioned the webhook.site endpoint. The destination is a generic request-capture service, not infrastructure associated with any declared publisher, and the data flow is unconditional on install.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"memories-core-web","fixed":[],"affected":"= 99.0.0","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-20T18:45:24+00:00","first_seen_at":"2026-10-26T20:51:48+00:00","triaged_at":"2026-10-26T20:59:55+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-18106':11A,14A '-2026':10A,13A '/b2967b0a-1b24-4670-8ae1-e09e3cf272c4/)':52C '5aa2bc32ff519468287f8a87deeff1349332b710735b9f78ee34ffd46c9511cb':34C 'amazon':32C 'amazon-inspector':31C 'associ':103C 'automat':70C 'captur':99C 'code':2A 'collector':48C,84C 'control':85C 'core':6A,17A 'curl':43C 'data':110C 'declar':36C,106C 'destin':93C 'detail':23C 'edit':26C 'endpoint':91C 'fire':69C 'flow':111C 'generic':96C 'hardcod':46C 'host':77C 'hostnam':57C,65C 'identifi':78C 'infrastructur':102C 'inspector':33C 'instal':55C,73C,76C,115C 'interpol':60C 'lifecycl':39C 'line':29C 'mal':9A,12A 'malici':1A,19B 'memori':5A 'memories':16A 'memories-core-web':4A,15A 'npm':8A,72C 'packag':20B 'package.json':35C 'paramet':63C 'parti':83C 'per':21C 'preinstal':38C 'provis':88C 'publish':107C 'queri':62C 'request':98C 'request-captur':97C 'run':42C 'script':40C 'servic':100C 'sourc':22C,30C 'third':82C 'third-parti':81C 'transmit':75C 'uncondit':113C 'url':49C 'usernam':59C 'via':64C 'web':7A,18A 'webhook.site':47C,51C,90C 'webhook.site/b2967b0a-1b24-4670-8ae1-e09e3cf272c4/)':50C 'whoami':67C 'whoever':87C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T18:45:24+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18106","url":"https://osv.dev/vulnerability/MAL-2026-18106","severity":"critical","published_at":"2026-10-20T18:45:24+00:00","modified_at":"2026-10-20T19:00:04+00:00","first_seen_at":"2026-10-26T20:51:48+00:00","fetched_at":"2026-10-26T20:51:48+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}