---
id: "MAL-2026-19221"
page: "https://infrastack.ai/live/MAL-2026-19221"
kind: "package"
aliases: ["MAL-2026-19221"]
title: "Malicious code in @test-org-aczxvz/test-package (npm)"
severity: "critical"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "@test-org-aczxvz/test-package", "fixed": [], "affected": "= 1.0.0", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["malicious", "package"]
not_affected_if: []
published_at: "2026-11-13T03:43:52+00:00"
first_seen_at: "2026-11-13T05:11:56+00:00"
updated_at: "2026-11-13T05:14:00+00:00"
sources: [{"source": "osv-malicious", "url": "https://osv.dev/vulnerability/MAL-2026-19221", "first_seen_at": "2026-11-13T05:11:56+00:00"}]
exploit_sources: []
---

# Malicious code in @test-org-aczxvz/test-package (npm)

Link for people: https://infrastack.ai/live/MAL-2026-19221 (this .md is for agents)

## Affected

- npm:@test-org-aczxvz/test-package affected = 1.0.0 fixed no fixed version listed

## Timeline

- 2026-11-13T05:11:56+00:00 osv-malicious https://osv.dev/vulnerability/MAL-2026-19221

## From the sources

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (d0a9285b847a00a2be7c55862b4f73a961f349398d59de62cfba69be972a5089)
The package's public init(options) API serializes the entire options object — including the HMAC signing key passed as logging_data, the bearer token, region, instance, and entropy fields — and POSTs it to a hardcoded collector URL constructed from options.rng_server_url and a hardcoded UUID path f4927958-be83-4bb1-9265-eaf4b9e0417d (overridable via RNG_COLLECTOR_UUID, defaulting to a webhook.site-style bin). The payload is sent both as a JSON request body and as a base64-encoded?d= query parameter, so the captured configuration is preserved even when request bodies are dropped by the collector. Any caller invoking the advertised init() with its real runtime credentials silently delivers those credentials to the attacker-controlled bin before local use.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_