{"id":"MAL-2026-18376","kind":"package","aliases":["MAL-2026-18376"],"related":[],"title":"Malicious code in black-spindle-2 (npm)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (433228fbed18f3104fed4cd1bce59bc5a76b8ea061d18c8fc9516c92b6b26e90)\npackage.json declares a postinstall script that runs curl against the ephemeral host http://778e-181-63-25-28.ngrok-free.app over plain HTTP, embedding a shell command-substitution expression in the URL path. The script fires automatically on npm install, confirming installation on the installer's machine and providing a channel to exfiltrate host or environment values via the expanded shell expression. The shipped index.js is an empty stub, so the manifest's postinstall beacon is the package's entire effect. The destination is an anonymous ngrok-free.app tunnel with no relationship to any legitimate publisher, consistent with a dependency-confusion or install-confirmation probe.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"black-spindle-2","fixed":[],"affected":"= 301.0.0; = 100.0.0","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-29T14:59:21+00:00","first_seen_at":"2026-10-29T16:25:02+00:00","triaged_at":"2026-10-29T16:33:22+00:00","updated_at":"2026-10-29T16:33:22+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-18376':11A,14A '-2026':10A,13A '-25':49C '-28':50C '-63':48C '2':7A,18A '433228fbed18f3104fed4cd1bce59bc5a76b8ea061d18c8fc9516c92b6b26e90':34C '778e-181':47C 'amazon':32C 'amazon-inspector':31C 'anonym':118C 'automat':69C 'beacon':107C 'black':5A,16A 'black-spindl':4A 'black-spindle':15A 'channel':83C 'code':2A 'command':59C 'command-substitut':58C 'confirm':73C,137C 'confus':133C 'consist':128C 'curl':42C 'declar':36C 'depend':132C 'dependency-confus':131C 'destin':115C 'detail':23C 'edit':26C 'effect':113C 'embed':55C 'empti':100C 'entir':112C 'environ':88C 'ephemer':45C 'exfiltr':85C 'expand':92C 'express':61C,94C 'fire':68C 'host':46C,86C 'http':54C 'index.js':97C 'inspector':33C 'instal':72C,74C,77C,136C 'install-confirm':135C 'legitim':126C 'line':29C 'machin':79C 'mal':9A,12A 'malici':1A,19B 'manifest':104C 'ngrok-free.app':51C,119C 'npm':8A,71C 'packag':20B,110C 'package.json':35C 'path':65C 'per':21C 'plain':53C 'postinstal':38C,106C 'probe':138C 'provid':81C 'publish':127C 'relationship':123C 'run':41C 'script':39C,67C 'shell':57C,93C 'ship':96C 'sourc':22C,30C 'spindl':6A 'spindle':17A 'stub':101C 'substitut':60C 'tunnel':120C 'url':64C 'valu':89C 'via':90C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"first_public_at":"2026-10-29T14:59:21+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18376","url":"https://osv.dev/vulnerability/MAL-2026-18376","severity":"critical","published_at":"2026-10-29T14:59:21+00:00","modified_at":"2026-10-29T15:30:05+00:00","first_seen_at":"2026-10-29T16:25:02+00:00","fetched_at":"2026-10-29T16:25:02+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}