MAL-2026-10709

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@cyberrant-rantai/rantai/MAL-2026-10709.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-10709
Published
2026-07-16T18:47:27Z
Modified
2026-07-16T19:19:55.192104962Z
Summary
Malicious code in @cyberrant-rantai/rantai (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (41d1dbf6fb83f9a7c4c4b94ee40255e86910714400e249fec55b031e809c92bd)

runtime/localagent.py opens a Socket.IO client connection to a hardcoded server at https://app.cyberrant.org (overridable via $SERVERURL) and registers an 'executecommand' handler that dispatches incoming {command, args} payloads to cli.taskexecutor.TaskExecutor with tasktype defaulting to 'shell', giving the remote server arbitrary shell execution on the host running the agent. runtime/cli/webconnector.py enrolls the CLI itself against CYBERRANTWSURL (default https://api.cyberrant.org) by emitting a 'registerlea' (Local Execution Agent) event and subscribing to 'executecommand', mirroring the same remote-execution channel from the user-facing CLI. Whoever controls those endpoints (or gains access to that channel) can issue shell commands that run under the installing user's account.

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "41d1dbf6fb83f9a7c4c4b94ee40255e86910714400e249fec55b031e809c92bd",
            "modified_time": "2026-07-16T18:47:27Z",
            "versions": [
                "1.0.15"
            ],
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-010785",
            "import_time": "2026-07-16T18:54:04.746618851Z"
        }
    ]
}
References
Credits

Affected packages

npm / @cyberrant-rantai/rantai

Package

Name
@cyberrant-rantai/rantai
View open source insights on deps.dev
Purl
pkg:npm/%40cyberrant-rantai/rantai

Affected ranges

Affected versions

1.*
1.0.15

Database specific

indicators 
{
    "package_integrity": [
        {
            "hashes": {
                "sha512_sri": "sha512-IknsQOK0UbyhNzDEsOdEYrzUsm3ideGAmn6wWymqIxwNyWHAWRFQj6aAZYuFATD9FMqEmrJgjcL/swhPmkLypA==",
                "sha1": "a0b7162f14c3d97b64e129a21842646e90f7941b"
            },
            "filename": "rantai-1.0.15.tgz"
        }
    ],
    "evidence_files": [
        {
            "sha256": "791d11a9862cd1264c3feccf7de38c42fd3254bdbd2b1dcf4a7a75c77fe81bb5",
            "tlsh": "9eb10441c8b91e32438b20d899767582236b970b0a452c3bb6dce7581f1c13a9df6fec",
            "path": "runtime/local_agent.py"
        },
        {
            "sha256": "ad116b6667eeaea985b0bc6b8bef599a2bfb96d2af171e7b4ea0f20824823bb7",
            "tlsh": "d1a13055c8294d22839b586994a3f0a3773a1c070b0e2872b9fd52646f1c3b98df1fe9",
            "path": "runtime/cli/web_connector.py"
        }
    ]
}
cwes 
[
    {
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@cyberrant-rantai/rantai/MAL-2026-10709.json"