{"id":"MAL-2026-18604","kind":"package","aliases":["MAL-2026-18604"],"related":[],"title":"Malicious code in @signals-notebook/annotation-editor (npm)","description":"Runs on install. The preinstall script sends the output of `id` (the installing user's identity and groups), base64-encoded, to a request-bin host with curl. This is the dependency-confusion probe pattern; it leaks data from every machine that installs the package. Version examined: 2.2.60-630109c; tarball SHA-256 023e55d33ea70625a746ab25627ea450718c9db722988bd233d370c1587db248.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"@signals-notebook/annotation-editor","fixed":[],"affected":"= 2.2.60-630109c","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T09:44:21+00:00","first_seen_at":"2026-11-04T09:25:53+00:00","triaged_at":"2026-11-04T09:26:43+00:00","updated_at":"2026-11-04T09:28:08+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-18604':11A,14A '-2026':10A,13A '-256':75C '-630109':71C '/annotation-editor':7A,18A '023e55':76C '2.2.60':70C 'base64':40C 'base64-encoded':39C 'bin':46C 'c':72C 'code':2A 'confus':55C 'curl':49C 'd33ea70625a746ab25627ea450718c9db722988bd233d370c1587db248':77C 'data':60C 'depend':54C 'dependency-confus':53C 'encod':41C 'everi':62C 'examin':69C 'group':38C 'host':47C 'id':31C 'ident':36C 'instal':23C,33C,65C 'leak':59C 'machin':63C 'mal':9A,12A 'malici':1A,19B 'notebook':6A,17A 'npm':8A 'output':29C 'packag':20B,67C 'pattern':57C 'preinstal':25C 'probe':56C 'request':45C 'request-bin':44C 'run':21C 'script':26C 'send':27C 'sha':74C 'signal':5A 'signals':16A 'signals-notebook':4A,15A 'tarbal':73C 'user':34C 'version':68C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["annotationeditor"],"ptokens":["annotation","editor","notebook","signals"],"labels":["critical","malicious","npm","package"],"campaign_type":null,"first_public_at":"2026-11-02T09:44:21+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-18604","url":"https://osv.dev/vulnerability/MAL-2026-18604","severity":"critical","published_at":"2026-11-02T09:44:21+00:00","modified_at":"2026-11-04T09:00:06+00:00","first_seen_at":"2026-11-04T09:25:53+00:00","fetched_at":"2026-11-04T09:25:53+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}