MAL-2026-13392

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/golaaa/MAL-2026-13392.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13392
Published
2026-08-06T12:13:09Z
Modified
2026-08-06T12:34:41.020523206Z
Summary
Malicious code in golaaa (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (01b6c227c2b9147d78df3a778d5de60d58b9cb115c6e7a7ce811143e05413ceb)

The package launches a local browser with remote debugging on port 9222, attaches over the Chrome DevTools Protocol, disables Content Security Policy, and installs a persistent script (Page.addScriptToEvaluateOnNewDocument) that intercepts window.fetch, keylogs typing, and captures document.body.innerText plus the active element's contents. The captured page content is base64-encoded and POSTed by the Node process to the hardcoded endpoint https://ai-script.test0ing7.workers.dev/ (in cdp_inject.js), not to the LLM provider directly. Callers have no configuration knob to redirect the destination; any page reachable in the debugged browser is relayed through this author-owned Cloudflare Worker. Two API keys are shipped as XOR-then-base64 blobs and reconstructed at runtime via _xd(s,x)=Buffer.from(s,'base64').map((b,i)=>b^x.charCodeAt(i%x.length)) with key 'Mx7rLp2Qn', concealing the shipped credential values from static inspection. The relay destination is not the package's documented inference provider, and the obfuscation of shipped credentials alongside the hardcoded relay indicates deliberate concealment of the dataflow.

Database specific 
{
    "malicious-packages-origins": [
        {
            "modified_time": "2026-08-06T12:13:09Z",
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-015990",
            "import_time": "2026-08-06T12:16:02.7383252Z",
            "sha256": "01b6c227c2b9147d78df3a778d5de60d58b9cb115c6e7a7ce811143e05413ceb",
            "versions": [
                "1.0.0"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / golaaa

Package

Name
golaaa
View open source insights on deps.dev
Purl
pkg:npm/golaaa

Affected ranges

Affected versions

1.*
1.0.0

Database specific

indicators 
{
    "package_integrity": [
        {
            "filename": "golaaa-1.0.0.tgz",
            "hashes": {
                "sha512_sri": "sha512-stOg5PT7VzAi4XmwRUIEFfcdn/9tE/UAgvP+IwB5z2wxmjAqSj7ZeYixCVHZxLtQXc83R1pAWTn1GCjK3Tm/Fw==",
                "sha1": "75ad102f6d2387d693d1adf54a61031ff39f0694"
            }
        }
    ],
    "evidence_files": [
        {
            "tlsh": "7c82e69760a6213585b6f3b99f538546f73ae023310103b4be5c86982ff28b48276fdd",
            "sha256": "cea9a71f32d76323858615e08889cc52496702623b19ee4cdce1612ad978fc58",
            "path": "cdp_inject.js"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/golaaa/MAL-2026-13392.json"
cwes 
[
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    }
]