{"id":"MAL-2026-18187","kind":"package","aliases":["MAL-2026-18187"],"related":[],"title":"Malicious code in simplewave (npm)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (d984cf27dec602e96199a4361b485f0a7c79e2134977a355d42ddb46edd606d0)\nsimplewave@0.0.2 declares a postinstall script in package.json that runs an inline Node command performing an HTTP GET to a subdomain of oast.fun with the installer's os.hostname() embedded as the leftmost DNS label. oast.fun is the public Interactsh out-of-band interaction server, used to receive exfiltrated data via DNS/HTTP callbacks. The beacon fires unconditionally on npm install, with no caller consent or configuration. The shipped index.js is a trivial stub providing no advertised functionality, so the manifest-level beacon is the package's entire effect. The host identifier of every machine that installs the package is delivered to a third-party OOB collector controlled by whoever provisioned the oast.fun subdomain token.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"simplewave","fixed":[],"affected":"= 0.0.2","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-22T06:10:14+00:00","first_seen_at":"2026-10-26T20:51:49+00:00","triaged_at":"2026-10-26T20:57:54+00:00","updated_at":"2026-10-26T21:05:48+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-18187':8A,11A '-2026':7A,10A '0.0.2':30C 'advertis':104C 'amazon':26C 'amazon-inspector':25C 'band':71C 'beacon':83C,111C 'callback':81C 'caller':91C 'code':2A 'collector':136C 'command':42C 'configur':94C 'consent':92C 'control':137C 'd984cf27dec602e96199a4361b485f0a7c79e2134977a355d42ddb46edd606d0':28C 'data':78C 'declar':31C 'deliv':129C 'detail':17C 'dns':61C 'dns/http':80C 'edit':20C 'effect':117C 'embed':57C 'entir':116C 'everi':122C 'exfiltr':77C 'fire':84C 'function':105C 'get':46C 'host':119C 'http':45C 'identifi':120C 'index.js':97C 'inlin':40C 'inspector':27C 'instal':54C,88C,125C 'interact':72C 'interactsh':67C 'label':62C 'leftmost':60C 'level':110C 'line':23C 'machin':123C 'mal':6A,9A 'malici':1A,13B 'manifest':109C 'manifest-level':108C 'node':41C 'npm':5A,87C 'oast.fun':51C,63C,142C 'oob':135C 'os.hostname':56C 'out-of-band':68C 'packag':14B,114C,127C 'package.json':36C 'parti':134C 'per':15C 'perform':43C 'postinstal':33C 'provid':102C 'provis':140C 'public':66C 'receiv':76C 'run':38C 'script':34C 'server':73C 'ship':96C 'simplewav':4A,29C 'simplewave':12A 'sourc':16C,24C 'stub':101C 'subdomain':49C,143C 'third':133C 'third-parti':132C 'token':144C 'trivial':100C 'uncondit':85C 'use':74C 'via':79C 'whoever':139C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T06:10:14+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18187","url":"https://osv.dev/vulnerability/MAL-2026-18187","severity":"critical","published_at":"2026-10-22T06:10:14+00:00","modified_at":"2026-10-22T06:45:05+00:00","first_seen_at":"2026-10-26T20:51:49+00:00","fetched_at":"2026-10-26T20:51:49+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}