{"id":"MAL-2026-19221","kind":"package","aliases":["MAL-2026-19221"],"related":[],"title":"Malicious code in @test-org-aczxvz/test-package (npm)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (d0a9285b847a00a2be7c55862b4f73a961f349398d59de62cfba69be972a5089)\nThe package's public init(options) API serializes the entire options object — including the HMAC signing key passed as logging_data, the bearer token, region, instance, and entropy fields — and POSTs it to a hardcoded collector URL constructed from options.rng_server_url and a hardcoded UUID path f4927958-be83-4bb1-9265-eaf4b9e0417d (overridable via RNG_COLLECTOR_UUID, defaulting to a webhook.site-style bin). The payload is sent both as a JSON request body and as a base64-encoded?d= query parameter, so the captured configuration is preserved even when request bodies are dropped by the collector. Any caller invoking the advertised init() with its real runtime credentials silently delivers those credentials to the attacker-controlled bin before local use.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"@test-org-aczxvz/test-package","fixed":[],"affected":"= 1.0.0","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-13T03:43:52+00:00","first_seen_at":"2026-11-13T05:11:56+00:00","triaged_at":"2026-11-13T05:12:56+00:00","updated_at":"2026-11-13T05:14:00+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-19221':12A,15A '-2026':11A,14A '/test-package':8A,20A '4bb1':87C '9265':88C 'aczxvz':7A,19A 'advertis':139C 'amazon':34C 'amazon-inspector':33C 'api':43C 'attack':153C 'attacker-control':152C 'base64':115C 'base64-encoded':114C 'be83':86C 'bearer':59C 'bin':100C,155C 'bodi':110C,129C 'caller':136C 'captur':122C 'code':2A 'collector':72C,93C,134C 'configur':123C 'construct':74C 'control':154C 'credenti':145C,149C 'd':117C 'd0a9285b847a00a2be7c55862b4f73a961f349398d59de62cfba69be972a5089':36C 'data':57C 'default':95C 'deliv':147C 'detail':25C 'drop':131C 'eaf4b9e0417d':89C 'edit':28C 'encod':116C 'entir':46C 'entropi':64C 'even':126C 'f4927958':85C 'f4927958-be83-4bb1':84C 'field':65C 'hardcod':71C,81C 'hmac':51C 'includ':49C 'init':41C,140C 'inspector':35C 'instanc':62C 'invok':137C 'json':108C 'key':53C 'line':31C 'local':157C 'log':56C 'mal':10A,13A 'malici':1A,21B 'npm':9A 'object':48C 'option':42C,47C 'options.rng':76C 'org':6A,18A 'overrid':90C 'packag':22B,38C 'paramet':119C 'pass':54C 'path':83C 'payload':102C 'per':23C 'post':67C 'preserv':125C 'public':40C 'queri':118C 'real':143C 'region':61C 'request':109C,128C 'rng':92C 'runtim':144C 'sent':104C 'serial':44C 'server':77C 'sign':52C 'silent':146C 'sourc':24C,32C 'style':99C 'test':5A,17A 'test-org-aczxvz':4A,16A 'token':60C 'url':73C,78C 'use':158C 'uuid':82C,94C 'via':91C 'webhook.site':98C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["testpackage"],"ptokens":["aczxvz","org","package","test"],"labels":["critical","malicious","npm","package"],"campaign_type":null,"search_a":"'-19221':12A,15A '-2026':11A,14A '/test-package':8A,20A 'aczxvz':7A,19A 'code':2A 'mal':10A,13A 'malici':1A 'npm':9A 'org':6A,18A 'test':5A,17A 'test-org-aczxvz':4A,16A","search_b":"'malici':21B 'packag':22B","search_c":"'4bb1':87C '9265':88C 'advertis':139C 'amazon':34C 'amazon-inspector':33C 'api':43C 'attack':153C 'attacker-control':152C 'base64':115C 'base64-encoded':114C 'be83':86C 'bearer':59C 'bin':100C,155C 'bodi':110C,129C 'caller':136C 'captur':122C 'collector':72C,93C,134C 'configur':123C 'construct':74C 'control':154C 'credenti':145C,149C 'd':117C 'd0a9285b847a00a2be7c55862b4f73a961f349398d59de62cfba69be972a5089':36C 'data':57C 'default':95C 'deliv':147C 'detail':25C 'drop':131C 'eaf4b9e0417d':89C 'edit':28C 'encod':116C 'entir':46C 'entropi':64C 'even':126C 'f4927958':85C 'f4927958-be83-4bb1':84C 'field':65C 'hardcod':71C,81C 'hmac':51C 'includ':49C 'init':41C,140C 'inspector':35C 'instanc':62C 'invok':137C 'json':108C 'key':53C 'line':31C 'local':157C 'log':56C 'object':48C 'option':42C,47C 'options.rng':76C 'overrid':90C 'packag':38C 'paramet':119C 'pass':54C 'path':83C 'payload':102C 'per':23C 'post':67C 'preserv':125C 'public':40C 'queri':118C 'real':143C 'region':61C 'request':109C,128C 'rng':92C 'runtim':144C 'sent':104C 'serial':44C 'server':77C 'sign':52C 'silent':146C 'sourc':24C,32C 'style':99C 'token':60C 'url':73C,78C 'use':158C 'uuid':82C,94C 'via':91C 'webhook.site':98C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T03:43:52+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-19221","url":"https://osv.dev/vulnerability/MAL-2026-19221","severity":"critical","published_at":"2026-11-13T03:43:52+00:00","modified_at":"2026-11-13T04:30:04+00:00","first_seen_at":"2026-11-13T05:11:56+00:00","fetched_at":"2026-11-13T05:11:56+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}