MAL-2026-10707

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ai-support-agent/cli/MAL-2026-10707.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-10707

Published

2026-07-16T18:48:58Z

Modified

2026-08-06T14:34:56Z

Summary

Malicious code in @ai-support-agent/cli (npm)

Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (bbbb67d5fa1c4b90e7da8e409f66e2e4ced88c5baa6eb14aa33d1d698d5baf69)

The @ai-support-agent/cli package installs a long-running daemon (ai-support-agent start) that connects to a vendor API (default wss://api.ai-support-agent.com/ws/agent-terminal and matching AppSync/HTTP endpoints) and executes remote-delivered commands against the local host. In dist/vscode/vscode-server.js and related files, handleStdin base64-decodes WebSocket message payloads and writes them straight into a local PTY (session.write(decoded)), giving a caller with a valid token an interactive shell on the machine running the agent. A separate command-dispatch path handles structured messages including execute_command (shell), file_read/file_write/file_delete/file_mkdir, process_list/process_kill, chat (spawns Claude Code / arbitrary subprocess), and setup/reboot/update, streaming results back to the vendor. darwin-service.js and linux-service.js install the agent as a persistent system service that starts on boot, and the daemon reaches the vendor over the public internet by default. Anyone who legitimately holds — or who compromises — the vendor API endpoint has full-host remote code execution, filesystem read/write, process control, and reboot capability on every machine running this agent. The daemon behavior is documented as the product's purpose (Web UI drives remote shell/file/process operations), but the network-to-PTY and network-to-exec paths are a persistent backdoor by construction regardless of framing, and blast radius extends to any future compromise of the vendor's control plane.

Database specific

{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-010795",
            "import_time": "2026-07-16T18:54:05.261601401Z",
            "modified_time": "2026-07-16T18:48:58Z",
            "sha256": "9e75ec61a75a0063b3e468c17ed905250c786c148bc8e30edfa93e20c4a19a54",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.1"
            ]
        },
        {
            "id": "IN-MAL-2026-015839",
            "import_time": "2026-08-05T18:07:51.245251958Z",
            "modified_time": "2026-08-05T18:05:03Z",
            "sha256": "224b5ea781d96c80043c5aa202f9846f7f518c16cd9ccc993bee1c00f3a71626",
            "source": "amazon-inspector",
            "versions": [
                "0.4.2"
            ]
        },
        {
            "id": "IN-MAL-2026-016457",
            "import_time": "2026-08-06T14:19:50.411420823Z",
            "modified_time": "2026-08-06T13:32:15Z",
            "sha256": "f0f2da3d4305d7d53c2e7fea8fd863d66fcbac979270c16ddc09c4ea35fead79",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.15"
            ]
        },
        {
            "id": "IN-MAL-2026-016464",
            "import_time": "2026-08-06T14:19:50.769465184Z",
            "modified_time": "2026-08-06T13:33:24Z",
            "sha256": "286534dc8c04d94608c556e1511005ed3096ad1607ef5f5a5e628c0ea4ec4ce5",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.9"
            ]
        },
        {
            "id": "IN-MAL-2026-016463",
            "import_time": "2026-08-06T14:19:50.724120222Z",
            "modified_time": "2026-08-06T13:33:13Z",
            "sha256": "46bbfbbfa0829ab59a333f2dcb5c92021a8e210e0645a9afec3b36aa270e157f",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.2"
            ]
        },
        {
            "id": "IN-MAL-2026-016470",
            "import_time": "2026-08-06T14:19:51.031590618Z",
            "modified_time": "2026-08-06T13:34:19Z",
            "sha256": "48ee80cf5df6978d739182fe22b664959bb028a512057d4c9483b6844eb66d42",
            "source": "amazon-inspector",
            "versions": [
                "0.3.5-beta.5"
            ]
        },
        {
            "id": "IN-MAL-2026-016453",
            "import_time": "2026-08-06T14:19:50.21580311Z",
            "modified_time": "2026-08-06T13:31:42Z",
            "sha256": "522c0bf36ee9925d8884ea4eac0474cef8e3e76320498ffc983c8ceb34019b83",
            "source": "amazon-inspector",
            "versions": [
                "0.3.7-beta.0"
            ]
        },
        {
            "id": "IN-MAL-2026-016474",
            "import_time": "2026-08-06T14:19:51.272520352Z",
            "modified_time": "2026-08-06T13:34:54Z",
            "sha256": "53f40240dc34864e9971de5522fa856b98c0fdbaf3ea7c7e4da5a95a99363549",
            "source": "amazon-inspector",
            "versions": [
                "0.4.0"
            ]
        },
        {
            "id": "IN-MAL-2026-016450",
            "import_time": "2026-08-06T14:19:50.084934328Z",
            "modified_time": "2026-08-06T13:31:15Z",
            "sha256": "78c3b32a529f186fbeee1d15ef5656eca8f0a9f9af509db4a0b7b7e483948b17",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.10"
            ]
        },
        {
            "id": "IN-MAL-2026-016468",
            "import_time": "2026-08-06T14:19:50.939474667Z",
            "modified_time": "2026-08-06T13:34:02Z",
            "sha256": "888aa9fa0f2120014fc22bacf78c4343123ee41b7007b2636ce744e6f4123a1a",
            "source": "amazon-inspector",
            "versions": [
                "0.3.5"
            ]
        },
        {
            "id": "IN-MAL-2026-016472",
            "import_time": "2026-08-06T14:19:51.142027372Z",
            "modified_time": "2026-08-06T13:34:36Z",
            "sha256": "97817fb6965bb38ec1e8a0c13d79c4b411511b6d5bd31b52466f1506b7a63e34",
            "source": "amazon-inspector",
            "versions": [
                "0.4.2-beta.0"
            ]
        },
        {
            "id": "IN-MAL-2026-016471",
            "import_time": "2026-08-06T14:19:51.092381818Z",
            "modified_time": "2026-08-06T13:34:28Z",
            "sha256": "2937552c2553c52e605076ddfca3adfae4caa789fea1aba8dc37386455784462",
            "source": "amazon-inspector",
            "versions": [
                "0.3.6"
            ]
        },
        {
            "id": "IN-MAL-2026-016475",
            "import_time": "2026-08-06T14:19:51.305561054Z",
            "modified_time": "2026-08-06T13:35:05Z",
            "sha256": "528281b3508567c0b34eb86417ec31ba55f62d34a864efae616e5a284c8546b1",
            "source": "amazon-inspector",
            "versions": [
                "0.3.6-beta.0"
            ]
        },
        {
            "id": "IN-MAL-2026-016462",
            "import_time": "2026-08-06T14:19:50.675105693Z",
            "modified_time": "2026-08-06T13:32:59Z",
            "sha256": "542ef569799b2cef41118d2e4cd4d5e1ae667023b0cde7e6889f2aedd31c6b5b",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.0"
            ]
        },
        {
            "id": "IN-MAL-2026-016456",
            "import_time": "2026-08-06T14:19:50.382371224Z",
            "modified_time": "2026-08-06T13:32:07Z",
            "sha256": "5a7995fb845a98c6d74a2445316baa48c433b3530bc69f2100325fbba6acb848",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.8"
            ]
        },
        {
            "id": "IN-MAL-2026-016459",
            "import_time": "2026-08-06T14:19:50.486518017Z",
            "modified_time": "2026-08-06T13:32:32Z",
            "sha256": "7b218b111cd6149cfd866fd3fddc43d8b38b8daf4e704a2ceb1e6fcfa6d125bf",
            "source": "amazon-inspector",
            "versions": [
                "0.4.1"
            ]
        },
        {
            "id": "IN-MAL-2026-016452",
            "import_time": "2026-08-06T14:19:50.165281682Z",
            "modified_time": "2026-08-06T13:31:33Z",
            "sha256": "abea757361df9c2cdfcb2c4f412f5df72a297aa319b06e5ca7d0f917b1d34653",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.5"
            ]
        },
        {
            "id": "IN-MAL-2026-016469",
            "import_time": "2026-08-06T14:19:50.974869596Z",
            "modified_time": "2026-08-06T13:34:10Z",
            "sha256": "baf485d66bf18f87d79a84c1761dcacad5c77f1450647f48943145e96a19ae9e",
            "source": "amazon-inspector",
            "versions": [
                "0.3.5-beta.3"
            ]
        },
        {
            "id": "IN-MAL-2026-016467",
            "import_time": "2026-08-06T14:19:50.891897199Z",
            "modified_time": "2026-08-06T13:33:51Z",
            "sha256": "e455630b30e6f842c00fd3f2472fc8a0bc0d7256a8d642f2a86be5ddaf801021",
            "source": "amazon-inspector",
            "versions": [
                "0.3.5-beta.0"
            ]
        },
        {
            "id": "IN-MAL-2026-016473",
            "import_time": "2026-08-06T14:19:51.184683503Z",
            "modified_time": "2026-08-06T13:34:44Z",
            "sha256": "04e3fd0d83e86f7f32b36665137126570f3d59e17b2f8c4b8e80e914a4bb60fb",
            "source": "amazon-inspector",
            "versions": [
                "0.4.1-beta.1"
            ]
        },
        {
            "id": "IN-MAL-2026-016449",
            "import_time": "2026-08-06T14:19:49.973296346Z",
            "modified_time": "2026-08-06T13:31:03Z",
            "sha256": "1bbdac8e1ff8d9c7f394910dc883bf000095cd4adbcdd87b7836b9af16764772",
            "source": "amazon-inspector",
            "versions": [
                "0.3.5-beta.4"
            ]
        },
        {
            "id": "IN-MAL-2026-016466",
            "import_time": "2026-08-06T14:19:50.860028499Z",
            "modified_time": "2026-08-06T13:33:41Z",
            "sha256": "91bcb4f32f04a3b6aa3ae08468e2881d6ca7e22aeaea4e7c15fa3dcfc4932499",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.3"
            ]
        },
        {
            "id": "IN-MAL-2026-016455",
            "import_time": "2026-08-06T14:19:50.32311641Z",
            "modified_time": "2026-08-06T13:31:59Z",
            "sha256": "bbbb67d5fa1c4b90e7da8e409f66e2e4ced88c5baa6eb14aa33d1d698d5baf69",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.11"
            ]
        },
        {
            "id": "IN-MAL-2026-016460",
            "import_time": "2026-08-06T14:19:50.553155848Z",
            "modified_time": "2026-08-06T13:32:40Z",
            "sha256": "e60625fefc9e7e837914b43b55da40a369476f20b6af433d2346975caf0765dd",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2"
            ]
        },
        {
            "id": "IN-MAL-2026-016461",
            "import_time": "2026-08-06T14:19:50.59947347Z",
            "modified_time": "2026-08-06T13:32:50Z",
            "sha256": "267c829247ec7038f7dc7ea8d76ac2636e72f96e2ae7279fd621003310edeee9",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.14"
            ]
        },
        {
            "id": "IN-MAL-2026-016465",
            "import_time": "2026-08-06T14:19:50.811700071Z",
            "modified_time": "2026-08-06T13:33:33Z",
            "sha256": "884d5ee0141a46fbf5c04371ed601b7a77db7cad0b371119772b1cbbcce7b0ff",
            "source": "amazon-inspector",
            "versions": [
                "0.3.3-beta.0"
            ]
        },
        {
            "id": "IN-MAL-2026-016451",
            "import_time": "2026-08-06T14:19:50.133948839Z",
            "modified_time": "2026-08-06T13:31:23Z",
            "sha256": "89ddcf114672d82be128344d7cbf8ff677461f841b235c62561fa3eee1508848",
            "source": "amazon-inspector",
            "versions": [
                "0.3.2-beta.4"
            ]
        },
        {
            "id": "IN-MAL-2026-016458",
            "import_time": "2026-08-06T14:19:50.455885006Z",
            "modified_time": "2026-08-06T13:32:26Z",
            "sha256": "e513c9b65cbb0866ea634b75b1fcdcdb96ce1936720661ac6bb8005aab60b4ee",
            "source": "amazon-inspector",
            "versions": [
                "0.3.6-beta.1"
            ]
        },
        {
            "id": "IN-MAL-2026-016454",
            "import_time": "2026-08-06T14:19:50.265076188Z",
            "modified_time": "2026-08-06T13:31:50Z",
            "sha256": "ec5b6b46f057cc871ace3b95229b730c73ed525695bda0d456befeebdfe4c1da",
            "source": "amazon-inspector",
            "versions": [
                "0.3.5-beta.1"
            ]
        }
    ]
}

References

Credits

- Amazon Inspector - FINDER
- - inspector-research@amazon.com

Affected packages

npm / @ai-support-agent/cli

Package

Name: @ai-support-agent/cli; View open source insights on deps.dev
Purl: pkg:npm/%40ai-support-agent/cli

Affected ranges

Affected versions

0.*

0.3.2-beta.0

0.3.2-beta.1

0.3.2-beta.2

0.3.2-beta.3

0.3.2-beta.4

0.3.2-beta.5

0.3.2-beta.8

0.3.2-beta.9

0.3.2-beta.10

0.3.2-beta.11

0.3.2-beta.14

0.3.2-beta.15

0.3.2

0.3.3-beta.0

0.3.5-beta.0

0.3.5-beta.1

0.3.5-beta.3

0.3.5-beta.4

0.3.5-beta.5

0.3.5

0.3.6-beta.0

0.3.6-beta.1

0.3.6

0.3.7-beta.0

0.4.0

0.4.1-beta.1

0.4.1

0.4.2-beta.0

0.4.2

Database specific

cwes

[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]

indicators

{
    "evidence_files": [
        {
            "path": "dist/browser/browser-local-server.js",
            "sha256": "cacf3ceca145410d0c3c7ec95e0d50a4f2afd317a0b36348e5e262e4b4ab0be3",
            "tlsh": "c652208539fb617295b7e29b1f6ba402a73b82073180ce94fb9d97104f0c94487d6ef8"
        },
        {
            "path": "dist/cli/service/darwin-service.js",
            "sha256": "426cec5d7af6930e6dd7c47cbd71749d28557357561fa3677090fed8994e4a1c",
            "tlsh": "5de2d8099de5d23466d2d55e2b076820fd2ac2133a54f974b6dcc788af4241c42bfbeb"
        },
        {
            "path": "dist/cli/service/linux-service.js",
            "sha256": "37b78bd607e1626b8e0e2558a5b416f478b01d955493093ca4d1fcfae7f54d2e",
            "tlsh": "1823b72a9eb5d336a691d16c2b0b7811fa2b92176704f9307adcc348df42458437eee7"
        },
        {
            "path": "dist/constants.js",
            "sha256": "17ef459da6b8b0863f5284ebda04c69a96d4d66cdd17c7a4d652d82346654e6e",
            "tlsh": "7bd2d52f692c9bf0134418601714f8933d1fd5977e1aa134f0a9db648a9fc9aca35be3"
        },
        {
            "path": "dist/vscode/vscode-server.js",
            "sha256": "bcf8f8912001cda41ea86d3105c012c3e948f8ea0cd540d9127c6c6f0998d52e",
            "tlsh": "6e72d80e57fb903a44f368691b0b6102731e9f87e615ea347b5cd3d1af4265c7190af4"
        }
    ],
    "package_integrity": [
        {
            "filename": "cli-0.3.2-beta.1.tgz",
            "hashes": {
                "sha1": "c4aac3ffac26c8977f737add3d8fa7d614d853e4",
                "sha512_sri": "sha512-I97HCE1arXzew361QjFZAFnKY8eZzSqLxnbadQyw6BTh4Rdqhou/Dng6cPro85LekYhZOXK2eCN/WSgdOyN9tw=="
            }
        }
    ]
}

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ai-support-agent/cli/MAL-2026-10707.json"