MAL-2026-13430

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ch4acko3/frontal-lobe/MAL-2026-13430.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13430
Published
2026-08-06T15:50:36Z
Modified
2026-08-06T23:50:27.660472727Z
Summary
Malicious code in @ch4acko3/frontal-lobe (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (b73f6f94b2fcc3ef2aabd490862d743e9722f891d2c41421b1352dc318294585)

The package hardcodes the endpoint http://47.112.15.137:8789/frontal/trace-sync (bare IPv4, plain HTTP) in lib/frontal-gateway/dist/trace-sync-rollout-receiver.js and uploads full Codex/Claude AI session rollouts — the user's prompts, model outputs, and source-code context — as gzip+base64 chunks, along with trace events that by default include memory query/recall/writeback text. The postinstall lifecycle script bin/frontal-codex-plugin-postinstall.mjs writes ~/.frontallobe/config.toml with [trace.sync] enabled = true and intervalminutes = 30, prompts the user for a Memorax user_id and silently reuses it as the trace-sync identity via resolveTraceSyncUserId, and starts the gateway backend via startBackendAndCheck, which runs a periodic background flush. The trace-sync destination is not configurable, differs from the documented test-code.beta.memorax.net service, is a bare IP over plaintext HTTP, and is activated at install time with no distinct opt-in for this channel. The seeded config's internal label describing this as an approved-test-user internal trace sync does not constitute user consent.

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "0.1.12"
            ],
            "import_time": "2026-08-06T18:09:02.700876865Z",
            "sha256": "446244dfd4510206ea9f62ce772ce70964f8197789c10c27dd13fe24ef7def44",
            "modified_time": "2026-08-06T15:50:36Z",
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-016661"
        },
        {
            "versions": [
                "0.1.12-preview.2"
            ],
            "import_time": "2026-08-06T18:09:02.943742998Z",
            "sha256": "f0f6d31f94799ff575e6cf35bc9b306d20fb422a3349824526e034fd7c7281d8",
            "modified_time": "2026-08-06T15:50:53Z",
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-016663"
        },
        {
            "versions": [
                "0.1.14"
            ],
            "import_time": "2026-08-06T18:09:02.814930412Z",
            "sha256": "b73f6f94b2fcc3ef2aabd490862d743e9722f891d2c41421b1352dc318294585",
            "modified_time": "2026-08-06T15:50:45Z",
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-016662"
        }
    ]
}
References
Credits

Affected packages

npm / @ch4acko3/frontal-lobe

Package

Name
@ch4acko3/frontal-lobe
View open source insights on deps.dev
Purl
pkg:npm/%40ch4acko3/frontal-lobe

Affected ranges

Affected versions

0.*
0.1.12-preview.2
0.1.12
0.1.14

Database specific

cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    },
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "lib/frontal-gateway/dist/trace-sync-config.js",
            "sha256": "5cf4b922caef4240de4d08047bf691f692be9346cba17138b5a9b68961a8b0dd",
            "tlsh": "56813606a8d79d320a11f498995fa011aee82b83011cb0e9f56d33583fde8b441f3fad"
        },
        {
            "path": "lib/frontal-gateway/dist/trace-sync-client.js",
            "sha256": "54b0f4a18ccb64765c565c050f930944d34cd2c7c4211c5670e280cb7f9ba3fa",
            "tlsh": "790243b52cb3161142e770e8a75f84097337416339d8e8e87e2c91402f9d8685bf3eda"
        }
    ],
    "package_integrity": [
        {
            "filename": "frontal-lobe-0.1.12.tgz",
            "hashes": {
                "sha1": "e4b1bdb17ae9bc7bdab33ffc0255ebbc261f21a0",
                "sha512_sri": "sha512-dhOWVBglY7FelF9qjYht9jYtMjohgtbC/tvNTTDONuIWsJNgAvcSocWwZlL/fk/G/X0ZvOUh13DFpvYpDJPpIA=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ch4acko3/frontal-lobe/MAL-2026-13430.json"