---
id: "MAL-2026-19229"
page: "https://infrastack.ai/live/MAL-2026-19229"
kind: "package"
aliases: ["MAL-2026-19229"]
title: "Malicious code in internallib_v647 (npm)"
severity: "critical"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "internallib_v647", "fixed": [], "affected": "= 1.0.3", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["malicious", "package"]
not_affected_if: []
published_at: "2026-11-13T04:15:52+00:00"
first_seen_at: "2026-11-13T05:11:56+00:00"
updated_at: "2026-11-13T05:14:00+00:00"
sources: [{"source": "osv-malicious", "url": "https://osv.dev/vulnerability/MAL-2026-19229", "first_seen_at": "2026-11-13T05:11:56+00:00"}]
exploit_sources: []
---

# Malicious code in internallib_v647 (npm)

Link for people: https://infrastack.ai/live/MAL-2026-19229 (this .md is for agents)

## Affected

- npm:internallib_v647 affected = 1.0.3 fixed no fixed version listed

## Timeline

- 2026-11-13T05:11:56+00:00 osv-malicious https://osv.dev/vulnerability/MAL-2026-19229

## From the sources

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (701b4c0d503cece80b2a7c5e7e59d1ae5b134b3b801e3ba966f177703917d244)
package.json declares the dependency `internallib-helper` as a plain-HTTP tarball URL at a bare internal IP: `http://10.0.77.5:8000/internallib-helper-1.0.0.tgz`. On `npm install`, npm fetches and installs whatever bytes that endpoint returns and runs any lifecycle scripts contained in the resolved tarball. The source is not the npm registry, there is no version pin, no integrity hash, and no TLS, so the fetched content is unauthenticated and mutable, and any party controlling or able to MITM 10.0.77.5:8000 controls code executed on the installing host. The shipped package source is a minimal stub, so the manifest line itself is the install-time execution vector.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_