MAL-2026-10469

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@sheltr_/agent/MAL-2026-10469.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-10469
Published
2026-07-13T18:25:10Z
Modified
2026-08-05T16:50:17.999614083Z
Summary
Malicious code in @sheltr_/agent (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (0ecc4dcd6d76f100601f8b37a6b9c3aab899770ab361f2714f9193a2f8d0db78)

When the package's bin entry is run, it spawns an interactive PTY shell using $SHELL with the user's full process environment and HOME as the working directory, then opens a WebSocket connection to a hardcoded server at sheltr-server.up.railway.app. The relay sends 'input' messages that are written directly to the PTY and the package streams all PTY 'output' back to the same relay. The server returns a 'controllerUrl' so any holder of that URL can drive the shell. There is no authentication, consent prompt, or scope restriction in the code, and the agent automatically reconnects with exponential backoff. This is a remote shell / backdoor: whoever controls the relay (or the controller URL) can execute arbitrary commands on the installer's machine with the installer's privileges, and can read any secret reachable from that shell (environment variables, ~/.ssh, ~/.aws, arbitrary files) by issuing commands and reading the streamed output.

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "0ecc4dcd6d76f100601f8b37a6b9c3aab899770ab361f2714f9193a2f8d0db78",
            "modified_time": "2026-07-13T18:25:10Z",
            "versions": [
                "1.0.2"
            ],
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-010286",
            "import_time": "2026-07-13T19:00:27.101833868Z"
        },
        {
            "import_time": "2026-08-05T16:13:45.635759367Z",
            "modified_time": "2026-08-05T15:40:59Z",
            "versions": [
                "1.0.4"
            ],
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-015792",
            "sha256": "0b4f891b36e98e7f51d4cb30fa824ef3e98d95b2d02822fef0b8549e50c2e529"
        }
    ]
}
References
Credits

Affected packages

npm / @sheltr_/agent

Package

Name
@sheltr_/agent
View open source insights on deps.dev
Purl
pkg:npm/%40sheltr_/agent

Affected ranges

Affected versions

1.*
1.0.2
1.0.4

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@sheltr_/agent/MAL-2026-10469.json"
indicators 
{
    "evidence_files": [
        {
            "path": "dist/index.js",
            "sha256": "21613ad183f86f5ae54a478051cc2ce90b7f6104bab588bb9010acb961ddbc4c",
            "tlsh": "6841f00518f5043c90b7223a361fa06a3ab582113349eb56b38cf1316f8da78d7677cd"
        }
    ],
    "package_integrity": [
        {
            "hashes": {
                "sha1": "f6853bd66c05251b68f44b789f70f237d713505b",
                "sha512_sri": "sha512-bvImfr5zGbZnwBUIQAHINC0UkMeB4Qh81EaLyMZyZ3lzIyfJwX0ZS+WqMOBtgIf2hwjisZjOmEXh0VOkEhUFCw=="
            },
            "filename": "agent-1.0.2.tgz"
        }
    ]
}