MAL-2026-12320

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@lizhao1/memorax-code-internal/MAL-2026-12320.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-12320
Published
2026-08-05T12:25:58Z
Modified
2026-08-05T19:19:47.841184217Z
Summary
Malicious code in @lizhao1/memorax-code-internal (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (b983c7d55b41a0eb0cd384b7efbdf186926e3e6ce1f88c62c8cf59a96e648285)

The npm postinstall script (bin/memorax-code-plugin-postinstall.mjs) unconditionally calls enableInternalDataCollectionConfig() with no user prompt, writing internal.datacollection.enabled=true and a self-defined consent string into ~/.memorax-code/config.toml, then starts a backend that harvests and transmits Codex and Claude Code session content. The backend module lib/memorax-code-backend/dist/internal-trace-collection-config.js hardcodes the destination http://47.112.192.211:8789/memorax-code/trace-collection (bare IP, plain HTTP, Alibaba Cloud netblock — not matching the advertised publisher domain code.memorax.net). flushInternalTraceCollection reads per-session events.jsonl and native rollout files for the configured AI clients and POSTs them in batches to that endpoint. Only a narrow allow-list of key names (authorization/apikey/secret/password) is redacted; user prompts, assistant replies, tool arguments, and file contents embedded in session events are transmitted in full. The 'consent' gate is satisfied by the postinstall itself writing the accepted consent-version string, and the pipeline is labeled 'internal data collection' / 'anonymous' despite shipping full session bodies to a hardcoded third-party endpoint.

Database specific 
{
    "malicious-packages-origins": [
        {
            "source": "amazon-inspector",
            "modified_time": "2026-08-05T12:25:58Z",
            "sha256": "b983c7d55b41a0eb0cd384b7efbdf186926e3e6ce1f88c62c8cf59a96e648285",
            "id": "IN-MAL-2026-014653",
            "versions": [
                "0.1.0"
            ],
            "import_time": "2026-08-05T13:08:34.137349047Z"
        },
        {
            "source": "amazon-inspector",
            "modified_time": "2026-08-05T13:01:15Z",
            "sha256": "f4ae94e1d2cc2af7b2aa649bf10616ede12b1f25fef43a5afbc2eeb1675b1675",
            "id": "IN-MAL-2026-014850",
            "versions": [
                "0.1.1"
            ],
            "import_time": "2026-08-05T13:08:50.990545492Z"
        },
        {
            "source": "amazon-inspector",
            "modified_time": "2026-08-05T18:07:28Z",
            "sha256": "05e39356232421d8cc201ffbe09dad80142de0a1966d278e5be5895ec492304f",
            "id": "IN-MAL-2026-015840",
            "versions": [
                "0.1.2"
            ],
            "import_time": "2026-08-05T19:04:53.760494706Z"
        }
    ]
}
References
Credits

Affected packages

npm / @lizhao1/memorax-code-internal

Package

Name
@lizhao1/memorax-code-internal
View open source insights on deps.dev
Purl
pkg:npm/%40lizhao1/memorax-code-internal

Affected ranges

Affected versions

0.*
0.1.0
0.1.1
0.1.2

Database specific

cwes 
[
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
indicators 
{
    "package_integrity": [
        {
            "hashes": {
                "sha512_sri": "sha512-9xd7H9AQ16vavitTjAwxB311N7empwJu7TWJty0ZfRAPYBansEMqGVAtLfn9uJLO75E43hKBvfpr76YSxEOt/A==",
                "sha1": "831369abce9e9f61c0679999d44de0000767b0aa"
            },
            "filename": "memorax-code-internal-0.1.0.tgz"
        }
    ],
    "evidence_files": [
        {
            "path": "bin/memorax-code-plugin-postinstall.mjs",
            "sha256": "34b55ed5796ccceede42fde845dbfa6094327d5336703db230d5706361fe222d",
            "tlsh": "e533c80878ef79320673506da41b8422b97c5d07210de970b7be465c6f8e16d83bfb6a"
        },
        {
            "path": "lib/memorax-code-backend/dist/internal-trace-collection-config.js",
            "sha256": "63de3189a47db13680a8b03bc67f19288b42a4318f51fdc6536414926e21c839",
            "tlsh": "05b1f41e7ce73e220a52b8dc854bc1566db86a43101c94e5f96c52c43fda57881f3bed"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@lizhao1/memorax-code-internal/MAL-2026-12320.json"