MAL-2026-12405

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/opencode-engos-ai/MAL-2026-12405.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-12405
Published
2026-08-05T12:53:36Z
Modified
2026-08-05T15:53:14.484176667Z
Summary
Malicious code in opencode-engos-ai (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (42180a034d43d3c6d16e223fe6fcd93f6e403f0c73c763e9b21b6aded0545274)

On npm install, postinstall.mjs enumerates platform-specific sibling package names of the form opencode-engos-<platform>-<arch>[-baseline][-musl], resolves each to the current 'latest' tag via npm view <name> version, installs the resolved version into a temp directory, then copies the fetched 'opencode' binary into the wrapper's bin/ with chmod 755. The fetched artifact is not pinned to a specific version and is not hash- or signature-verified, so whatever the publisher of the sibling packages pushes to 'latest' at install time is what executes on the installer's host. The sibling package names are not declared in the manifest's optionalDependencies, so they are resolved by name rather than through the reviewable dependency graph. In addition, createSymlinks() writes symlinks at /usr/local/bin/innexarcode and /usr/bin/innexarcode pointing at the fetched binary — a name that matches neither the package name (opencode-engos-ai), its declared bin entry (opencode-engos), nor any documented CLI, placing an unrelated command into the installer's system PATH. The package name also resembles the existing 'opencode' AI CLI.

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "1.20.3"
            ],
            "import_time": "2026-08-05T13:08:47.663026429Z",
            "sha256": "42180a034d43d3c6d16e223fe6fcd93f6e403f0c73c763e9b21b6aded0545274",
            "id": "IN-MAL-2026-014803",
            "modified_time": "2026-08-05T12:53:36Z",
            "source": "amazon-inspector"
        },
        {
            "versions": [
                "1.20.4"
            ],
            "import_time": "2026-08-05T13:08:47.791811191Z",
            "sha256": "8c97ac47776709c018fd0dcd2daa504cb0e1ae1a9786b70abc1a038d3b91bd98",
            "id": "IN-MAL-2026-014805",
            "modified_time": "2026-08-05T12:53:51Z",
            "source": "amazon-inspector"
        },
        {
            "source": "amazon-inspector",
            "import_time": "2026-08-05T13:08:47.73101038Z",
            "sha256": "8ea5805ce6c61daf9bf748a407e79a757c666cc3c12e466cd2f42eb6a11ba9e8",
            "id": "IN-MAL-2026-014804",
            "modified_time": "2026-08-05T12:53:44Z",
            "versions": [
                "1.20.5"
            ]
        },
        {
            "source": "amazon-inspector",
            "import_time": "2026-08-05T13:08:47.857066551Z",
            "sha256": "d0978a861dd3b3a1c5bf397f78b6cccb65c964fdc32abbb0d53ca611f93473ef",
            "id": "IN-MAL-2026-014806",
            "modified_time": "2026-08-05T12:54:00Z",
            "versions": [
                "1.20.6"
            ]
        },
        {
            "versions": [
                "1.21.3"
            ],
            "import_time": "2026-08-05T15:19:42.45534172Z",
            "sha256": "0a8d48936684698b631843d10310a99e5ffece8fda6f0a1c30bfbe42ea2a1cb7",
            "id": "IN-MAL-2026-015284",
            "modified_time": "2026-08-05T14:23:57Z",
            "source": "amazon-inspector"
        }
    ]
}
References
Credits

Affected packages

npm / opencode-engos-ai

Package

Name
opencode-engos-ai
View open source insights on deps.dev
Purl
pkg:npm/opencode-engos-ai

Affected ranges

Affected versions

1.*
1.20.3
1.20.4
1.20.5
1.20.6
1.21.3

Database specific

indicators 
{
    "package_integrity": [
        {
            "hashes": {
                "sha512_sri": "sha512-7raXSjQkGMKgZkvp1aPQjzn4kY+/wOlWfGUGI8IsQLhwELf4E7Ii61Vf+maLaLIiTq5FZRwyu59M08UzYYF2Kg==",
                "sha1": "064adc89430dc19f076d90b8a9e5a840b4222245"
            },
            "filename": "opencode-engos-ai-1.20.3.tgz"
        }
    ],
    "evidence_files": [
        {
            "path": "postinstall.mjs",
            "sha256": "92f0dfef74b6843590f1d87f64e729f764b220abe929d535a5d753ecc28b2013",
            "tlsh": "26d1659242a70370af815262174b7529667b80f3360aad98b6cc53d43f7a63482b79fd"
        }
    ]
}
cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/opencode-engos-ai/MAL-2026-12405.json"