MAL-2026-13355

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@astralcore/sl-aura/MAL-2026-13355.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13355
Published
2026-08-05T16:34:09Z
Modified
2026-08-06T14:34:59.436998881Z
Summary
Malicious code in @astralcore/sl-aura (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (91ae2c72e5e03d23f3f5704859e8c92b9ce6c565c6d14d744d4382b980a0d233)

This WhatsApp bot package ships several mechanisms that give the author persistent remote control of any installer's running instance and access to the installer's WhatsApp account. config.env and config/index.js hardcode OWNERNUMBERS (falling back to '94726800969' when unset) that parser.js uses to set isCreator/isOwner; src/commands/filemanager.js exposes creator-gated WhatsApp commands (.getfile,.putfile,.mkdir,.fullzip) that read arbitrary files under the bot project root, overwrite files, and zip the entire project tree back to the remote party — giving the hardcoded author numbers full file read/write and full-tree exfiltration over WhatsApp. config/index.js also defaults MONGODBURI to 'mongodb+srv://unity-free:unity-free@unity-free.pc6vkvw.mongodb.net/...', and src/commands/index.js persists the Baileys auth state (creds and signal keys — the full auth material for the paired WhatsApp account) into that database via useMongoDBAuthState, so an installer running with shipped defaults uploads their WhatsApp session credentials to a cluster whose credentials are controlled by the author, enabling remote account takeover. config.env additionally ships live TGPAIRBOTTOKEN and TGSUPERBOTTOKEN plus hardcoded TGADMINIDS; src/telegram/superBot.js polls these tokens at startup and gates commands (/pair, downloads, session management) on isAdmin() matching those hardcoded IDs, providing a second remote-control channel into every default-configured installer. The package also ships additional third-party credentials belonging to the author (Gemini API key, Gmail SMTP app password, dashboard secret/password).

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "1.0.6"
            ],
            "sha256": "91ae2c72e5e03d23f3f5704859e8c92b9ce6c565c6d14d744d4382b980a0d233",
            "import_time": "2026-08-05T17:04:49.319800926Z",
            "id": "IN-MAL-2026-015826",
            "modified_time": "2026-08-05T16:34:09Z",
            "source": "amazon-inspector"
        },
        {
            "source": "amazon-inspector",
            "import_time": "2026-08-06T14:19:52.564570417Z",
            "sha256": "ad1b9a5639b6cd7ec75d55d5201a4c899a0c83493837a83659ad0b499d92519d",
            "id": "IN-MAL-2026-016500",
            "modified_time": "2026-08-06T13:41:30Z",
            "versions": [
                "1.0.0"
            ]
        },
        {
            "versions": [
                "1.0.5"
            ],
            "import_time": "2026-08-06T14:19:52.74967981Z",
            "sha256": "f3dae0fadf870b0a1b0cf2560c0a9c070e9b59d0151aa73cbf33dcb32a8aeeed",
            "id": "IN-MAL-2026-016504",
            "modified_time": "2026-08-06T13:42:11Z",
            "source": "amazon-inspector"
        },
        {
            "versions": [
                "1.0.1"
            ],
            "import_time": "2026-08-06T14:19:52.512700894Z",
            "sha256": "96b843d40810ff0e688b7567c92de2c5577562063f85be51c568cd7f941148d9",
            "id": "IN-MAL-2026-016499",
            "modified_time": "2026-08-06T13:41:22Z",
            "source": "amazon-inspector"
        },
        {
            "versions": [
                "1.0.4"
            ],
            "sha256": "991a98ef37ae2e17736c4ead8b8a0fb22b0f32d03792fb831c48fccf4058f1e2",
            "import_time": "2026-08-06T14:19:52.617225422Z",
            "id": "IN-MAL-2026-016501",
            "modified_time": "2026-08-06T13:41:38Z",
            "source": "amazon-inspector"
        }
    ]
}
References
Credits

Affected packages

npm / @astralcore/sl-aura

Package

Name
@astralcore/sl-aura
View open source insights on deps.dev
Purl
pkg:npm/%40astralcore/sl-aura

Affected ranges

Affected versions

1.*
1.0.0
1.0.1
1.0.4
1.0.5
1.0.6

Database specific

indicators 
{
    "package_integrity": [
        {
            "filename": "sl-aura-1.0.6.tgz",
            "hashes": {
                "sha512_sri": "sha512-HyWI5f95LqbRVkVM1Rh4j+4NdJJ3x/xGOudbrriRL8Vs5NtXeyN8XamFMGe9df/qdwr4w9NtOxi4zFvnx1O4sw==",
                "sha1": "262eb514faddaecd4d967e2f1322e3474e2ed9c8"
            }
        }
    ],
    "evidence_files": [
        {
            "tlsh": "d9a194726d48386c3a8bc50ed793fa041a0cf25b790980e0ebca3422b3cc0b998559fd",
            "sha256": "b2cd6d977cb86bab8e263e4b870be3070b40e8e55f4ee93beef65995d0140d8e",
            "path": "config.env"
        }
    ]
}
cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@astralcore/sl-aura/MAL-2026-13355.json"