MAL-2026-13259

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/chatcc-agent/MAL-2026-13259.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13259
Published
2026-08-05T15:38:53Z
Modified
2026-08-05T16:50:20Z
Summary
Malicious code in chatcc-agent (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (8a69e686f3f793120840abd296a10a4b1c8d734797607e7dce82a82e90cf7cf0)

chatcc-agent runs a daemon that connects to Tencent Cloud IM as a WebSocket client and treats inbound peer messages of type 'terminal_command', 'terminal_input', and 'terminal_pty_*' as instructions to spawn or write to a local shell / PTY on the installer's machine. In src/cclink-studio-remote.js and related handlers, _handleAdvancedCommand calls pty.spawn(shell, ['-lc', command],...) with the command string supplied by the remote IM peer, and handleInput forwards peer-supplied bytes into the active process's stdin. The result is a network-reachable, remote-controlled command-execution channel into the host that installed and runs the agent. Access is gated by JWT / paired-client authentication, but the channel, its bindings to a login shell, and the ability to stream arbitrary stdin exist by design and constitute a remote-shell surface regardless of how the package is described. Separately, the npm install script only performs a local native build (chmod of the shipped node-pty spawn-helper and compilation of a shipped C source with cc) and does not fetch or execute remote content.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-015779",
            "import_time": "2026-08-05T16:13:44.383118579Z",
            "modified_time": "2026-08-05T15:38:53Z",
            "sha256": "8a69e686f3f793120840abd296a10a4b1c8d734797607e7dce82a82e90cf7cf0",
            "source": "amazon-inspector",
            "versions": [
                "0.8.24"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / chatcc-agent

Package

Name
chatcc-agent
View open source insights on deps.dev
Purl
pkg:npm/chatcc-agent

Affected ranges

Affected versions

0.*
0.8.24

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "src/terminal-bridge.js",
            "sha256": "9e0124c7367ecda8a092fbf9df5c5fc60891544ab1f23118e800f592e88e312d",
            "tlsh": "bf6231972ef321308aa7e0680e3791562735b1173945ede4b6bc47cc8f8c698d2e6f94"
        },
        {
            "path": "src/install.js",
            "sha256": "1cb2ebac3b1ff60545fe2c9512d8ebacbe9a0e016c6f21b4280304dc981e5a5a",
            "tlsh": "6a5134cb80a5331921e646fd7a5a64627abbc00b9b48c77275ce0f532f8601c57d2deb"
        }
    ],
    "package_integrity": [
        {
            "filename": "chatcc-agent-0.8.24.tgz",
            "hashes": {
                "sha1": "92d75dfd4e58da761ea43c35284418564dc3b5f8",
                "sha512_sri": "sha512-ZF9JiM0hqecJtX9Qnu8RLYIgJN/ioVdJCzmRx9oTi9NcciDGDuc2mOUt4Ga6ybuDC+53G7CAfdKPC0rmREI3qA=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/chatcc-agent/MAL-2026-13259.json"