MAL-2026-10721

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@whalent/agent/MAL-2026-10721.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-10721
Published
2026-07-16T18:46:02Z
Modified
2026-08-06T12:34:41Z
Summary
Malicious code in @whalent/agent (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (13a01c1162adb93d3960d9e1b1b67095dcf0a1ea72aefa6d471d0abbbabb5d9a)

The package installs a whalent CLI daemon that opens a persistent WebSocket connection (wss://) to a Whalent Memory gateway and, per its own README, accepts remote commands including 'upgrade' and 'restart' from that gateway. dist/index.cjs contains an npmInstallCommand builder that assembles npm install -g @whalent/agent@<version> --registry=<DEFAULT_NPM_REGISTRY|CHINA_NPM_REGISTRY> strings driven by the gateway's chosen version — meaning whoever controls (or compromises) the gateway can cause the daemon's host to install and execute an arbitrary version of the package as the user running the daemon. The core bundle additionally references process.env.SHELL and localhost RDP/VNC ports (127.0.0.1:3389, 5900, 5901), and the dependency set includes @xterm/headless, node-pty (optional), ssh2, and ws, indicating terminal/PTY and remote-session capability reachable from the same gateway channel. Both dist/index.cjs (main/bin entry) and the 13 MB dist/core.cjs are transformed with javascript-obfuscator (string-array rotator, _0x-named helpers, control-flow flattening), and javascript-obfuscator is listed in devDependencies — the obfuscation covers the gateway command dispatcher and shell sinks. The daemon fires only when the operator explicitly runs whalent --token …, not on npm install or on require(), but once running it provides a network-reachable code-execution and shell surface on the host controlled by the gateway operator.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-010776",
            "import_time": "2026-07-16T18:54:04.170460603Z",
            "modified_time": "2026-07-16T18:46:02Z",
            "sha256": "0d9a3395e3bbc1bae774ea99bb4100a3db071a6b4527eaba0ae9089eb51bf268",
            "source": "amazon-inspector",
            "versions": [
                "0.3.231"
            ]
        },
        {
            "id": "IN-MAL-2026-015923",
            "import_time": "2026-08-05T21:31:24.18783414Z",
            "modified_time": "2026-08-05T21:29:09Z",
            "sha256": "fc9f1353dd1babb9c60ebc986caa84ffc82882b0921aa11c995b78115b1831ec",
            "source": "amazon-inspector",
            "versions": [
                "0.3.283"
            ]
        },
        {
            "id": "IN-MAL-2026-015913",
            "import_time": "2026-08-05T21:31:23.163601517Z",
            "modified_time": "2026-08-05T21:27:40Z",
            "sha256": "4d12514948b86d764b8828c54da52db3244e1d32c15822732080a8705686c0dc",
            "source": "amazon-inspector",
            "versions": [
                "0.3.295"
            ]
        },
        {
            "id": "IN-MAL-2026-015922",
            "import_time": "2026-08-05T21:31:24.099484376Z",
            "modified_time": "2026-08-05T21:28:58Z",
            "sha256": "553c3c9ae96a853c5d3a49ca66416b51a19d0bd294822defd0df17a5ad730b2d",
            "source": "amazon-inspector",
            "versions": [
                "0.3.282"
            ]
        },
        {
            "id": "IN-MAL-2026-015926",
            "import_time": "2026-08-05T21:31:24.508318128Z",
            "modified_time": "2026-08-05T21:29:31Z",
            "sha256": "f059b944ebbb2201e187717af8c1ced2094523e0cfc422c317cb0b2f73a55efd",
            "source": "amazon-inspector",
            "versions": [
                "0.3.280"
            ]
        },
        {
            "id": "IN-MAL-2026-015908",
            "import_time": "2026-08-05T21:31:22.705587573Z",
            "modified_time": "2026-08-05T21:26:52Z",
            "sha256": "ff77fe438b3c498e663f632745ad49fdd123b606e2668812745587553d83aa2f",
            "source": "amazon-inspector",
            "versions": [
                "0.3.296"
            ]
        },
        {
            "id": "IN-MAL-2026-015932",
            "import_time": "2026-08-05T21:31:25.094022984Z",
            "modified_time": "2026-08-05T21:30:28Z",
            "sha256": "ff7f073fcc9c9de06e5c948f467500633311cf9d69631c774e62c385c687d069",
            "source": "amazon-inspector",
            "versions": [
                "0.3.277"
            ]
        },
        {
            "id": "IN-MAL-2026-015910",
            "import_time": "2026-08-05T21:31:22.890751707Z",
            "modified_time": "2026-08-05T21:27:12Z",
            "sha256": "054a3b27608efc3b6046ba900250b63f649d321d68864e03c77c4202ee41448a",
            "source": "amazon-inspector",
            "versions": [
                "0.3.297"
            ]
        },
        {
            "id": "IN-MAL-2026-015936",
            "import_time": "2026-08-05T21:31:25.460480794Z",
            "modified_time": "2026-08-05T21:31:00Z",
            "sha256": "0dbf05a1e7d0d675731ac8c0fdef41559cb2b17e410d813f99fad51aa1558287",
            "source": "amazon-inspector",
            "versions": [
                "0.3.272"
            ]
        },
        {
            "id": "IN-MAL-2026-015920",
            "import_time": "2026-08-05T21:31:23.902306254Z",
            "modified_time": "2026-08-05T21:28:41Z",
            "sha256": "0ebc433777a6ed727cb390ea43f1c82503392a23183778302aab0c05705b53a8",
            "source": "amazon-inspector",
            "versions": [
                "0.3.285"
            ]
        },
        {
            "id": "IN-MAL-2026-015907",
            "import_time": "2026-08-05T21:31:22.614251246Z",
            "modified_time": "2026-08-05T21:26:40Z",
            "sha256": "1ee6fbcdfd260d01d4728ffaa358c4c00b0dd2e731efa5c7e13bc18a68bb573d",
            "source": "amazon-inspector",
            "versions": [
                "0.3.298"
            ]
        },
        {
            "id": "IN-MAL-2026-015917",
            "import_time": "2026-08-05T21:31:23.558514615Z",
            "modified_time": "2026-08-05T21:28:17Z",
            "sha256": "2290c129b9b8945e34dd008a13a6bd4ee82b66d9be831b810e3d165d92eae5fc",
            "source": "amazon-inspector",
            "versions": [
                "0.3.291"
            ]
        },
        {
            "id": "IN-MAL-2026-015927",
            "import_time": "2026-08-05T21:31:24.600882905Z",
            "modified_time": "2026-08-05T21:29:41Z",
            "sha256": "8b762d1e2538fcc3a53e85ab0274dc6f3bde2f37f19b1d761f93130f86baa2b6",
            "source": "amazon-inspector",
            "versions": [
                "0.3.279"
            ]
        },
        {
            "id": "IN-MAL-2026-015925",
            "import_time": "2026-08-05T21:31:24.415883945Z",
            "modified_time": "2026-08-05T21:29:23Z",
            "sha256": "f862750d3f0716c770f107a2afe93ddaa40911f6f48d16321db8d94aaeb15f45",
            "source": "amazon-inspector",
            "versions": [
                "0.3.281"
            ]
        },
        {
            "id": "IN-MAL-2026-015959",
            "import_time": "2026-08-05T22:01:17.478970392Z",
            "modified_time": "2026-08-05T21:34:01Z",
            "sha256": "4eefc57ee5420b206ad8e11af7bd2a9672179b2ae9c241eb10454a28cf1a64b8",
            "source": "amazon-inspector",
            "versions": [
                "0.3.253"
            ]
        },
        {
            "id": "IN-MAL-2026-015971",
            "import_time": "2026-08-05T22:01:18.786854275Z",
            "modified_time": "2026-08-05T21:35:39Z",
            "sha256": "83d40295cc196e560a165974bdcc904456a3bcab856403a693797306490375f1",
            "source": "amazon-inspector",
            "versions": [
                "0.3.244"
            ]
        },
        {
            "id": "IN-MAL-2026-015937",
            "import_time": "2026-08-05T22:01:15.075312976Z",
            "modified_time": "2026-08-05T21:31:07Z",
            "sha256": "895d90f479cebc5a5d33aa417aa370e3694190cfb6287da27e4979e268d8ac8f",
            "source": "amazon-inspector",
            "versions": [
                "0.3.269"
            ]
        },
        {
            "id": "IN-MAL-2026-015943",
            "import_time": "2026-08-05T22:01:15.691598313Z",
            "modified_time": "2026-08-05T21:31:58Z",
            "sha256": "8ed957d4942ccccb6e4e7a08d70aba6305a6c47ec18992decfb5526324bd3c3a",
            "source": "amazon-inspector",
            "versions": [
                "0.3.264"
            ]
        },
        {
            "id": "IN-MAL-2026-015969",
            "import_time": "2026-08-05T22:01:18.571815434Z",
            "modified_time": "2026-08-05T21:35:21Z",
            "sha256": "90466332f58b17a0b4eae1aa65639029736d4f2d7021644e0ac4b158fa76fb8c",
            "source": "amazon-inspector",
            "versions": [
                "0.3.247"
            ]
        },
        {
            "id": "IN-MAL-2026-015961",
            "import_time": "2026-08-05T22:01:17.698964872Z",
            "modified_time": "2026-08-05T21:34:16Z",
            "sha256": "966bf296bb0b058366d848362f37c4fd26ea51bd26819ed08821f79fffb1f7af",
            "source": "amazon-inspector",
            "versions": [
                "0.3.251"
            ]
        },
        {
            "id": "IN-MAL-2026-015976",
            "import_time": "2026-08-05T22:01:19.278107797Z",
            "modified_time": "2026-08-05T21:36:22Z",
            "sha256": "13a01c1162adb93d3960d9e1b1b67095dcf0a1ea72aefa6d471d0abbbabb5d9a",
            "source": "amazon-inspector",
            "versions": [
                "0.3.240"
            ]
        },
        {
            "id": "IN-MAL-2026-015979",
            "import_time": "2026-08-05T22:01:19.582482742Z",
            "modified_time": "2026-08-05T21:36:46Z",
            "sha256": "183a5929f09b6d62afd0ca5e8c06e6d12eb05e8ac8488139daa97affde9e5dfc",
            "source": "amazon-inspector",
            "versions": [
                "0.3.239"
            ]
        },
        {
            "id": "IN-MAL-2026-015946",
            "import_time": "2026-08-05T22:01:16.075305183Z",
            "modified_time": "2026-08-05T21:32:20Z",
            "sha256": "e00560d5a7b4a8793a416a65deb7c9db34b30b6e57c0971b71724038cd7dab4b",
            "source": "amazon-inspector",
            "versions": [
                "0.3.263"
            ]
        },
        {
            "id": "IN-MAL-2026-015972",
            "import_time": "2026-08-05T22:01:18.898443142Z",
            "modified_time": "2026-08-05T21:35:46Z",
            "sha256": "e4e8676772d9460bc79d4a5e0d494349dcc141bdd9fd7cf7bf63b9841aaa108d",
            "source": "amazon-inspector",
            "versions": [
                "0.3.243"
            ]
        },
        {
            "id": "IN-MAL-2026-015987",
            "import_time": "2026-08-05T22:01:20.498498247Z",
            "modified_time": "2026-08-05T21:37:53Z",
            "sha256": "0aa95c21db0e80af982a98996b0ce0840da58f58071e05894780d6f4b9580ac9",
            "source": "amazon-inspector",
            "versions": [
                "0.3.233"
            ]
        },
        {
            "id": "IN-MAL-2026-015957",
            "import_time": "2026-08-05T22:01:17.254955093Z",
            "modified_time": "2026-08-05T21:33:45Z",
            "sha256": "1e892f2936e3527e3908ef5ab9fdf3f144fd5f4d9823963b8d6b71db5864a142",
            "source": "amazon-inspector",
            "versions": [
                "0.3.252"
            ]
        },
        {
            "id": "IN-MAL-2026-015966",
            "import_time": "2026-08-05T22:01:18.259260115Z",
            "modified_time": "2026-08-05T21:34:55Z",
            "sha256": "2f81deb87d31cd0f08d5d87a09f4104a2b9b858b94e1418be1394f94d3b9d3f9",
            "source": "amazon-inspector",
            "versions": [
                "0.3.250"
            ]
        },
        {
            "id": "IN-MAL-2026-015986",
            "import_time": "2026-08-05T22:01:20.397326694Z",
            "modified_time": "2026-08-05T21:37:42Z",
            "sha256": "3774078bdb40c185c056183187a8694db268269601d266441f5b5c8e76080d45",
            "source": "amazon-inspector",
            "versions": [
                "0.3.238"
            ]
        },
        {
            "id": "IN-MAL-2026-015954",
            "import_time": "2026-08-05T22:01:16.945919358Z",
            "modified_time": "2026-08-05T21:33:25Z",
            "sha256": "3aca42738f971bd3edffbe5cad924460cafe0814733fb5d78292be09de4827b1",
            "source": "amazon-inspector",
            "versions": [
                "0.3.255"
            ]
        },
        {
            "id": "IN-MAL-2026-015982",
            "import_time": "2026-08-05T22:01:19.908274391Z",
            "modified_time": "2026-08-05T21:37:08Z",
            "sha256": "bda9dace78866f9b37922722b4b6ceb716edcc340f4f760ad00ea0a3be1bdfb8",
            "source": "amazon-inspector",
            "versions": [
                "0.3.235"
            ]
        },
        {
            "id": "IN-MAL-2026-015965",
            "import_time": "2026-08-05T22:01:18.164627714Z",
            "modified_time": "2026-08-05T21:34:48Z",
            "sha256": "26b4c4d778c8faa85c5491b3a866ea984294bf79317b0e576b057f48c78d691c",
            "source": "amazon-inspector",
            "versions": [
                "0.3.248"
            ]
        },
        {
            "id": "IN-MAL-2026-015938",
            "import_time": "2026-08-05T22:01:15.191667394Z",
            "modified_time": "2026-08-05T21:31:19Z",
            "sha256": "78977bcb4e65b2897a4b13e97090d74c75c51e8f76fe22c2c544f8963140b465",
            "source": "amazon-inspector",
            "versions": [
                "0.3.268"
            ]
        },
        {
            "id": "IN-MAL-2026-015949",
            "import_time": "2026-08-05T22:01:16.409452821Z",
            "modified_time": "2026-08-05T21:32:46Z",
            "sha256": "8f0f30f53e8a6a61aebdfdf0c80ac0295acaa8fc3f1b441b4f5ed96ddfb3535e",
            "source": "amazon-inspector",
            "versions": [
                "0.3.261"
            ]
        },
        {
            "id": "IN-MAL-2026-015988",
            "import_time": "2026-08-05T22:01:20.588880116Z",
            "modified_time": "2026-08-05T21:38:05Z",
            "sha256": "9468ce68e595cdebd7a6ae02d12dca1053e22ea2df05d9ad88f0dc38b61ecc25",
            "source": "amazon-inspector",
            "versions": [
                "0.3.230"
            ]
        },
        {
            "id": "IN-MAL-2026-015977",
            "import_time": "2026-08-05T22:01:19.370368423Z",
            "modified_time": "2026-08-05T21:36:30Z",
            "sha256": "a69dde8063b2360d69ab3c87d2c95b015dffef0e6d2f60fc457f57e87a0154cf",
            "source": "amazon-inspector",
            "versions": [
                "0.3.241"
            ]
        },
        {
            "id": "IN-MAL-2026-015985",
            "import_time": "2026-08-05T22:01:20.297006068Z",
            "modified_time": "2026-08-05T21:37:33Z",
            "sha256": "abd1d06a175c56825c7a38ce77fb9fc38bf03c246f259ed9c681edbabc8fbbdb",
            "source": "amazon-inspector",
            "versions": [
                "0.3.234"
            ]
        },
        {
            "id": "IN-MAL-2026-015964",
            "import_time": "2026-08-05T22:01:18.055669099Z",
            "modified_time": "2026-08-05T21:34:40Z",
            "sha256": "cd7401a05d69a7a558ccb4813d1906f3ce80884e57dfc181ea9a76bbceec2f3e",
            "source": "amazon-inspector",
            "versions": [
                "0.3.249"
            ]
        },
        {
            "id": "IN-MAL-2026-015989",
            "import_time": "2026-08-05T22:01:20.698847644Z",
            "modified_time": "2026-08-05T21:38:12Z",
            "sha256": "db9a806b1b1d6ae806ed8bf735fec2a7e4a9e852a2c990d3d366db7877678053",
            "source": "amazon-inspector",
            "versions": [
                "0.3.232"
            ]
        },
        {
            "id": "IN-MAL-2026-015956",
            "import_time": "2026-08-05T22:01:17.146180892Z",
            "modified_time": "2026-08-05T21:33:39Z",
            "sha256": "046e44af467bf9f9451b532da22a71d193ac97213f042ad217927558e8100209",
            "source": "amazon-inspector",
            "versions": [
                "0.3.254"
            ]
        },
        {
            "id": "IN-MAL-2026-015942",
            "import_time": "2026-08-05T22:01:15.606648242Z",
            "modified_time": "2026-08-05T21:31:50Z",
            "sha256": "33f3732b67fc26c62344381cb3c0d8890b90c1999656363e26c9f41e1ab1c083",
            "source": "amazon-inspector",
            "versions": [
                "0.3.265"
            ]
        },
        {
            "id": "IN-MAL-2026-015991",
            "import_time": "2026-08-06T12:16:02.911878834Z",
            "modified_time": "2026-08-06T12:14:14Z",
            "sha256": "1ae150ffa9ddc01d96f5f58c49deb2fd8a4cbcdc0c0e7533ef970a36c04d0b24",
            "source": "amazon-inspector",
            "versions": [
                "0.3.302"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / @whalent/agent

Package

Name
@whalent/agent
View open source insights on deps.dev
Purl
pkg:npm/%40whalent/agent

Affected ranges

Affected versions

0.*
0.3.230
0.3.231
0.3.232
0.3.233
0.3.234
0.3.235
0.3.238
0.3.239
0.3.240
0.3.241
0.3.243
0.3.244
0.3.247
0.3.248
0.3.249
0.3.250
0.3.251
0.3.252
0.3.253
0.3.254
0.3.255
0.3.261
0.3.263
0.3.264
0.3.265
0.3.268
0.3.269
0.3.272
0.3.277
0.3.279
0.3.280
0.3.281
0.3.282
0.3.283
0.3.285
0.3.291
0.3.295
0.3.296
0.3.297
0.3.298
0.3.302

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "dist/core.cjs",
            "sha256": "98cd234f034f096c13645f43d06de89f9796fbc315472c1356d58018ab59e745",
            "tlsh": "bd26094063c06999338b5ffb7717b0e2e51e185e74484c9be128be6479e6213faf9930"
        },
        {
            "path": "dist/index.cjs",
            "sha256": "2929a9697182bfdf8dd4db4512285a6ae26e4899b731ec47b6b7fdbd447c7070",
            "tlsh": "b623f845afc0795f33950bb77317a0d1c61b1d6cf24894afe2257e342e822b6e6e8871"
        }
    ],
    "package_integrity": [
        {
            "filename": "agent-0.3.231.tgz",
            "hashes": {
                "sha1": "b6f1db1c9178efc05ca012ec748ba779c892d2c2",
                "sha512_sri": "sha512-NoNcECkz44F0Lfzo9QLOTt3mlRHbnInleBPAc4u+cKNcjvI8mIEpqyGWcsD+Lcynim8O0BgyPdwnN6CeVAOxQg=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@whalent/agent/MAL-2026-10721.json"