MAL-2026-10705

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@agent-link/agent/MAL-2026-10705.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-10705

Published

2026-07-16T18:41:12Z

Modified

2026-08-06T14:34:57.925321276Z

Summary

Malicious code in @agent-link/agent (npm)

Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (a7018626958a160ab35a17b31ddd130ba9b6046b870f115b0fa83622b66bd912)

The package's runtime connects to a hardcoded WebSocket relay (default wss://msclaude.ai) and dispatches messages received from that relay directly into a locally spawned PTY. terminal.js spawns the user's default shell (or powershell.exe on Windows) via node-pty and exposes a write() method that pipes network-received bytes straight into the shell (ptyProcess?.write(data)); connection.js routes terminal_open / terminal_input events from the WebSocket's on('message') handler to that PTY. This grants whoever controls the relay endpoint, or anyone holding a session URL, interactive command execution on the host running the agent, including via a ping/GET/POST/http.request command path in dist/local-control-client.js, dist/local-control-http.js, dist/tunnel.js, dist/upgrade-operations.js, and worker/worker.cjs. Publisher provenance for the relay is unclear: package.json homepage points at github.com/yilee/agentlink, the README's Related link points at a different GitHub owner (kailunshi_microsoft/AgenticWorker), and the branding plus hardcoded relay domain is msclaude.ai, which is not tied to a verifiable publisher identity. In addition, emergency-upgrade.js fetches a release manifest from https://msclaude.ai/files/agent/latest.json (and beta.json) and downloads a replacement tarball from the same origin, verifying only hash/size/name against a manifest served by that same origin — so control of msclaude.ai also grants signed-by-manifest package replacement.

Database specific

{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-010745",
            "import_time": "2026-07-16T18:54:02.371271035Z",
            "sha256": "b3a178213d6597e731a313e9ec92f5b2afb8b955e3205500fa67ff6dc1ca989c",
            "modified_time": "2026-07-16T18:41:12Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.269"
            ]
        },
        {
            "id": "IN-MAL-2026-016050",
            "import_time": "2026-08-06T13:08:42.374770949Z",
            "sha256": "d482435ee79a0a7d632e1059787cde8173eab9c01ce75854e786a4da31d125db",
            "modified_time": "2026-08-06T12:24:19Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.325"
            ]
        },
        {
            "id": "IN-MAL-2026-016431",
            "import_time": "2026-08-06T14:19:48.798363974Z",
            "sha256": "4278037c2425e8f4a45b96bdf5dc9f4fb18a8fa705d52600d313da4c30b4b1cc",
            "versions": [
                "0.1.319"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:28:10Z"
        },
        {
            "id": "IN-MAL-2026-016426",
            "import_time": "2026-08-06T14:19:48.576629261Z",
            "sha256": "8f58784e1cea34de7ee3fc4f8489e32931659524b24c64051783210f0cd4cade",
            "versions": [
                "0.1.285"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:27:24Z"
        },
        {
            "import_time": "2026-08-06T14:19:49.668190883Z",
            "id": "IN-MAL-2026-016443",
            "sha256": "947b4ed25a2191b8b712002a627f9573695fad823d760c3812f2459958ed13fc",
            "modified_time": "2026-08-06T13:30:06Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.280"
            ]
        },
        {
            "id": "IN-MAL-2026-016446",
            "import_time": "2026-08-06T14:19:49.805778633Z",
            "sha256": "bb903bf72dbf94360d4b59f147bd7eaa8ade44f249c472334dd87d16558db5fc",
            "versions": [
                "0.1.272"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:30:33Z"
        },
        {
            "id": "IN-MAL-2026-016411",
            "import_time": "2026-08-06T14:19:47.705683492Z",
            "sha256": "cfe1b0819afde0fd8ed370cc911ecb60f7e8de1d277cba4c4f40dc4da2b0e66d",
            "versions": [
                "0.1.310"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:25:01Z"
        },
        {
            "id": "IN-MAL-2026-016439",
            "import_time": "2026-08-06T14:19:49.181439291Z",
            "sha256": "23b248d2d132e1a620eadaab2ef2d74f0bdf3920e679c40fcba55c18fb67d80c",
            "modified_time": "2026-08-06T13:29:24Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.293"
            ]
        },
        {
            "id": "IN-MAL-2026-016440",
            "import_time": "2026-08-06T14:19:49.218237574Z",
            "sha256": "33a35f5fa1e44dfcc26236fe2a10d7d3fe3c62a079dad7d1880f60a0e4f5a5bc",
            "modified_time": "2026-08-06T13:29:37Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.283"
            ]
        },
        {
            "id": "IN-MAL-2026-016422",
            "import_time": "2026-08-06T14:19:48.364007925Z",
            "sha256": "4bcbde2d0f6c5a4b81a86c25475d7e4a460887d9ba60c11b433e13a04d322f2a",
            "modified_time": "2026-08-06T13:26:50Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.299"
            ]
        },
        {
            "id": "IN-MAL-2026-016424",
            "import_time": "2026-08-06T14:19:48.497178805Z",
            "sha256": "a7f119f7622c8874ef779e15bed666f0659a7a85b1f6a4cac5648264d8d2deb7",
            "versions": [
                "0.1.279"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:27:07Z"
        },
        {
            "id": "IN-MAL-2026-016436",
            "import_time": "2026-08-06T14:19:49.043130639Z",
            "sha256": "10f60ac8ac68b9ea34e1f0147a4675a283561910df3a8bcd48c91a6af7acd7f5",
            "modified_time": "2026-08-06T13:28:58Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.308"
            ]
        },
        {
            "id": "IN-MAL-2026-016437",
            "import_time": "2026-08-06T14:19:49.078789432Z",
            "sha256": "3afbdda9662510b9bc36c58767b424e1ba47838b50783dbd7b977490ed2119cf",
            "modified_time": "2026-08-06T13:29:08Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.294"
            ]
        },
        {
            "id": "IN-MAL-2026-016442",
            "import_time": "2026-08-06T14:19:49.632650021Z",
            "sha256": "aa37dc54b80236fe0d1bf7eca73200bd31762e207d0e64c9d90a9690a6c21c8c",
            "versions": [
                "0.1.281"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:29:59Z"
        },
        {
            "import_time": "2026-08-06T14:19:48.416702521Z",
            "id": "IN-MAL-2026-016423",
            "sha256": "dd3fefbf53f93e3bbe09b9f03c6f7c73e259775c48aa3ebd8ead653afc411faf",
            "modified_time": "2026-08-06T13:26:57Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.287"
            ]
        },
        {
            "import_time": "2026-08-06T14:19:48.722212839Z",
            "id": "IN-MAL-2026-016429",
            "sha256": "08f8c8942bfdf12a4b8e00b4306ec0b629024a6d39bf1d378824b439ba724356",
            "modified_time": "2026-08-06T13:27:53Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.320"
            ]
        },
        {
            "import_time": "2026-08-06T14:19:48.666094221Z",
            "id": "IN-MAL-2026-016428",
            "sha256": "1de63a0d2014350f180994ab39b5b7cd004ec85cec18dead9906d970e20ed6fc",
            "modified_time": "2026-08-06T13:27:43Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.323"
            ]
        },
        {
            "id": "IN-MAL-2026-016448",
            "import_time": "2026-08-06T14:19:49.931953879Z",
            "sha256": "6044506d0bb6c1093350c48a802db939c8d8926e6c35c64f68ea7cf1b00beab9",
            "modified_time": "2026-08-06T13:30:55Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.270"
            ]
        },
        {
            "id": "IN-MAL-2026-016425",
            "import_time": "2026-08-06T14:19:48.545359414Z",
            "sha256": "629d3769a58cc71939ce3ceb9b8034ca9f51f7789c84a92d6580e3090251b0a7",
            "modified_time": "2026-08-06T13:27:17Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.303"
            ]
        },
        {
            "id": "IN-MAL-2026-016432",
            "import_time": "2026-08-06T14:19:48.874493123Z",
            "sha256": "7e2ee45ea00f90911f0ff5b59d9e467009d1f4b226d1dedab0e5f60fb00ea6a7",
            "versions": [
                "0.1.316"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:28:19Z"
        },
        {
            "id": "IN-MAL-2026-016430",
            "import_time": "2026-08-06T14:19:48.761110006Z",
            "sha256": "90f7f274748137bc2bba20582fcba672d868fdf172de49c93f43028610b0a43a",
            "versions": [
                "0.1.322"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:28:01Z"
        },
        {
            "id": "IN-MAL-2026-016412",
            "import_time": "2026-08-06T14:19:47.775743458Z",
            "sha256": "a54ab78ab4051000c97688fa8ba82c80a76dd421c40b80ef9dfec2932d91a360",
            "modified_time": "2026-08-06T13:25:09Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.277"
            ]
        },
        {
            "id": "IN-MAL-2026-016417",
            "import_time": "2026-08-06T14:19:48.126428451Z",
            "sha256": "a65773f09ae0629d99d6e77e6b3162a0ecc032d49f4d1f1e80accd654c1a935a",
            "versions": [
                "0.1.278"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:26:00Z"
        },
        {
            "id": "IN-MAL-2026-016413",
            "import_time": "2026-08-06T14:19:47.813091475Z",
            "sha256": "26fec2ed49b27382954612c21ee577ed4505e1723692f0728db846047da60bad",
            "versions": [
                "0.1.284"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:25:20Z"
        },
        {
            "id": "IN-MAL-2026-016435",
            "import_time": "2026-08-06T14:19:49.005843416Z",
            "sha256": "9c5ba8cbffba24b651538873b170c5513151be1fe8aea22f99edf927325988e3",
            "versions": [
                "0.1.311"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:28:51Z"
        },
        {
            "id": "IN-MAL-2026-016419",
            "import_time": "2026-08-06T14:19:48.227972202Z",
            "sha256": "5d6dfe55a8f420dbe3f483f20e0e464b344914749be12ae0b9d91893bf7be93e",
            "versions": [
                "0.1.296"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:26:23Z"
        },
        {
            "id": "IN-MAL-2026-016427",
            "import_time": "2026-08-06T14:19:48.619899386Z",
            "sha256": "6e6ead7b2d42dbf14db5f762261808c904c1c3651fe7c64ef62239ef9bcb307a",
            "modified_time": "2026-08-06T13:27:30Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.324"
            ]
        },
        {
            "id": "IN-MAL-2026-016415",
            "import_time": "2026-08-06T14:19:47.948893039Z",
            "sha256": "76927680c892820a7356d7a2a7d8067a3bab8c185ae5292da5936ea40b1ce969",
            "versions": [
                "0.1.275"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:25:39Z"
        },
        {
            "id": "IN-MAL-2026-016410",
            "import_time": "2026-08-06T14:19:47.665017965Z",
            "sha256": "d6eda73a24dcaadefafc9d5c51ce68a38af3a0bb3567f19edbcb0487159c0558",
            "modified_time": "2026-08-06T13:24:51Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.318"
            ]
        },
        {
            "id": "IN-MAL-2026-016416",
            "import_time": "2026-08-06T14:19:48.048536183Z",
            "sha256": "1e1631888c5e02e2079bba55868e5c11e5a060386d7e326c9ddc5694f153ccc1",
            "versions": [
                "0.1.274"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:25:52Z"
        },
        {
            "import_time": "2026-08-06T14:19:48.954816895Z",
            "id": "IN-MAL-2026-016434",
            "sha256": "4c2b8df370a7e139cdbe7add6b6245c8237d2c85f6c4135e2d25f6d4100522db",
            "modified_time": "2026-08-06T13:28:38Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.312"
            ]
        },
        {
            "id": "IN-MAL-2026-016420",
            "import_time": "2026-08-06T14:19:48.26263498Z",
            "sha256": "6442aa18e474535f8d89b662a82d7a024bc85b81ba746d324edfaaa8343b6a99",
            "versions": [
                "0.1.298"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:26:32Z"
        },
        {
            "id": "IN-MAL-2026-016421",
            "import_time": "2026-08-06T14:19:48.305443664Z",
            "sha256": "a7018626958a160ab35a17b31ddd130ba9b6046b870f115b0fa83622b66bd912",
            "versions": [
                "0.1.302"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:26:40Z"
        },
        {
            "import_time": "2026-08-06T14:19:49.744673548Z",
            "id": "IN-MAL-2026-016445",
            "sha256": "0599cf46b13d8e49970defa6efcab5c3c5c443b69e23410c5b6ea39f9de9e771",
            "modified_time": "2026-08-06T13:30:24Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.292"
            ]
        },
        {
            "id": "IN-MAL-2026-016441",
            "import_time": "2026-08-06T14:19:49.575874963Z",
            "sha256": "6f4c497a94bb043382fd02a3a770121074908c2b33ba44466c342bfd9f9b0422",
            "modified_time": "2026-08-06T13:29:45Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.282"
            ]
        },
        {
            "id": "IN-MAL-2026-016438",
            "import_time": "2026-08-06T14:19:49.119984296Z",
            "sha256": "738c5859cfa0d45ec880a457799d477dac5ae128f340b7499b742438d0bafdd6",
            "versions": [
                "0.1.304"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:29:15Z"
        },
        {
            "id": "IN-MAL-2026-016433",
            "import_time": "2026-08-06T14:19:48.908999291Z",
            "sha256": "f31aebf266e0b372b02ce60a45d3e526a979434f5c9eab63559cd62e30439471",
            "versions": [
                "0.1.314"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:28:29Z"
        },
        {
            "id": "IN-MAL-2026-016444",
            "import_time": "2026-08-06T14:19:49.710012663Z",
            "sha256": "ffedf56aa5c1a180796cb8b10399aba76e466238dfe46240c13dd4711c92f295",
            "versions": [
                "0.1.273"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:30:17Z"
        },
        {
            "id": "IN-MAL-2026-016447",
            "import_time": "2026-08-06T14:19:49.884236644Z",
            "sha256": "0c2db810c52cb641ba0eadab0e0312d9a2f98eff6d34cee160f8fe44acdfd7a4",
            "versions": [
                "0.1.271"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-06T13:30:43Z"
        },
        {
            "id": "IN-MAL-2026-016414",
            "import_time": "2026-08-06T14:19:47.917817905Z",
            "sha256": "0d69969cfdb50817d375081008c9f006ffdf855f1abece639a87166298ec9f68",
            "modified_time": "2026-08-06T13:25:28Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.289"
            ]
        },
        {
            "id": "IN-MAL-2026-016418",
            "import_time": "2026-08-06T14:19:48.176974773Z",
            "sha256": "3a308c26270ade143293f2b3364bec9a377b369dd93bee6ebdca0566a1dfff51",
            "modified_time": "2026-08-06T13:26:09Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.307"
            ]
        }
    ]
}

References

Credits

- Amazon Inspector - FINDER
- - inspector-research@amazon.com

Affected packages

npm / @agent-link/agent

Package

Name: @agent-link/agent; View open source insights on deps.dev
Purl: pkg:npm/%40agent-link/agent

Affected ranges

Affected versions

0.*

0.1.269

0.1.270

0.1.271

0.1.272

0.1.273

0.1.274

0.1.275

0.1.277

0.1.278

0.1.279

0.1.280

0.1.281

0.1.282

0.1.283

0.1.284

0.1.285

0.1.287

0.1.289

0.1.292

0.1.293

0.1.294

0.1.296

0.1.298

0.1.299

0.1.302

0.1.303

0.1.304

0.1.307

0.1.308

0.1.310

0.1.311

0.1.312

0.1.314

0.1.316

0.1.318

0.1.319

0.1.320

0.1.322

0.1.323

0.1.324

0.1.325

Database specific

cwes

[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@agent-link/agent/MAL-2026-10705.json"

indicators

{
    "evidence_files": [
        {
            "path": "dist/terminal.js",
            "tlsh": "139121a95dff193446b73439624f210fa971d0232309cd21ba5d8f625fd627c61d07ae",
            "sha256": "fd7e7a2a092d230d0c94be7c634c15a5dc492705b9dff4b8c1d1d559a9cd4fe5"
        }
    ],
    "package_integrity": [
        {
            "filename": "agent-0.1.269.tgz",
            "hashes": {
                "sha1": "a78cdac8b0c5891e32cb2a38903103de1b705d0d",
                "sha512_sri": "sha512-8iSt8k2xJB04+OAF2O0s9MfrWLcOfhmjGI0uYnMX4Q6qO8FsZ8jPM87GD9s88DiQZeYNPwPa5uSBGfPDGqrfuA=="
            }
        }
    ]
}