MAL-2026-13363

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@cliphijack/santaclaude/MAL-2026-13363.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13363
Published
2026-08-05T18:17:50Z
Modified
2026-08-06T14:34:46.794788845Z
Summary
Malicious code in @cliphijack/santaclaude (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (f6a4fa42a55635225fb914eaea97cbc9699efb6cc197445eacf32e6592b60675)

The santaclaude bin opens a persistent WebSocket connection to https://santaclaude.app and long-polls /api/control/claim. Messages received from the server are dispatched to runControl(cmd), which invokes tmux send-keys -l (plus Enter) into arbitrary target windows on the user's host, spawns new tmux windows that run claude --dangerously-skip-permissions by default, and can kill or resize windows. The result is that the remote endpoint can execute arbitrary shell keystrokes in the user's tmux sessions and drive an AI coding agent that has itself been configured to bypass tool-use confirmations, yielding full-host command execution. A second path (checkUpdate()) polls /api/cli-version and, when the server returns a target value, writes it to ~/.santaclaude-target, exits with code 75, and causes the wrapper loop to re-exec npx -y @cliphijack/santaclaude@<server-chosen-version> — the version of the client that runs next is chosen by the remote server. Additional shell hooks (hooks/sc-notify.sh, hooks/sc-stop.sh) POST via curl to the same service with host identifiers. Whether or not the operator of santaclaude.app is the package author, the shipped design gives that endpoint an unauthenticated remote-control channel into the installer's shell and agent.

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "1.0.104"
            ],
            "import_time": "2026-08-05T19:04:54.289051829Z",
            "sha256": "e88afc6f55057610bf4d08504cb81d57d75ebb6f4b914b513ba7ce8e6c970f31",
            "id": "IN-MAL-2026-015848",
            "modified_time": "2026-08-05T18:17:50Z",
            "source": "amazon-inspector"
        },
        {
            "versions": [
                "1.0.106"
            ],
            "import_time": "2026-08-06T14:19:55.162846095Z",
            "sha256": "d698d924d4c966f5607141d27ac0ca6537caeeb591b2ce8bc45adc883ea31059",
            "id": "IN-MAL-2026-016553",
            "modified_time": "2026-08-06T14:00:11Z",
            "source": "amazon-inspector"
        },
        {
            "versions": [
                "1.0.100"
            ],
            "import_time": "2026-08-06T14:19:55.197827035Z",
            "sha256": "f6a4fa42a55635225fb914eaea97cbc9699efb6cc197445eacf32e6592b60675",
            "id": "IN-MAL-2026-016554",
            "modified_time": "2026-08-06T14:00:20Z",
            "source": "amazon-inspector"
        },
        {
            "versions": [
                "1.0.107"
            ],
            "sha256": "5c5c1fd6edaa6c6493c7a8913752be30640a6ecab7eedb6eb0a11189b489b2b9",
            "import_time": "2026-08-06T14:19:55.117703027Z",
            "id": "IN-MAL-2026-016552",
            "modified_time": "2026-08-06T14:00:01Z",
            "source": "amazon-inspector"
        },
        {
            "versions": [
                "1.0.102"
            ],
            "sha256": "6d1cb4c79e0a4e3827b55930ebb97917c9202e9967b517987013f602b7365ba9",
            "import_time": "2026-08-06T14:19:55.251861949Z",
            "id": "IN-MAL-2026-016555",
            "modified_time": "2026-08-06T14:00:33Z",
            "source": "amazon-inspector"
        },
        {
            "versions": [
                "1.0.103"
            ],
            "import_time": "2026-08-06T14:19:55.007527226Z",
            "sha256": "ca93352f04a1362e18f90681c68593ba46f4990765efa5fde5c8899df34d3459",
            "id": "IN-MAL-2026-016550",
            "modified_time": "2026-08-06T13:59:41Z",
            "source": "amazon-inspector"
        },
        {
            "versions": [
                "1.0.108"
            ],
            "import_time": "2026-08-06T14:19:55.042657749Z",
            "sha256": "d61263b768da6865bd9ad63d1d13eb2b4e05a93b4fc011f20621fb90d805e8fa",
            "id": "IN-MAL-2026-016551",
            "modified_time": "2026-08-06T13:59:50Z",
            "source": "amazon-inspector"
        }
    ]
}
References
Credits

Affected packages

npm / @cliphijack/santaclaude

Package

Name
@cliphijack/santaclaude
View open source insights on deps.dev
Purl
pkg:npm/%40cliphijack/santaclaude

Affected ranges

Affected versions

1.*
1.0.100
1.0.102
1.0.103
1.0.104
1.0.106
1.0.107
1.0.108

Database specific

indicators 
{
    "package_integrity": [
        {
            "hashes": {
                "sha512_sri": "sha512-Of9W8JCN5MiyIWU24ffuh7c1Ln9Hf4AH9SJ9G9GIYb94rTGewcIyFOQKiG3wzJsKTcUGRcURldHPI0gJc1SsdA==",
                "sha1": "9e38a13049c29422748fce3132935d806b2595de"
            },
            "filename": "santaclaude-1.0.104.tgz"
        }
    ],
    "evidence_files": [
        {
            "tlsh": "9f345ce714ab31782467d04e6b5bb219b323e4233747d9a0fddc4704af91829869b9fc",
            "sha256": "0cbabc2307a58960e614365b63161a719bc7f972dbc5894583357cbc23711516",
            "path": "santaclaude.js"
        }
    ]
}
cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@cliphijack/santaclaude/MAL-2026-13363.json"