MAL-2026-14063

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/twilio-hackerone-poc-afe6937c/MAL-2026-14063.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-14063
Published
2026-08-15T15:57:00Z
Modified
2026-08-15T16:15:12Z
Summary
Malicious code in twilio-hackerone-poc-afe6937c (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (6790435b096935699da3234140accc517ced689047a68e698cae06288939eed9)

On npm install, preinstall/postinstall scripts execute id, read environment variables including AWS_LAMBDA_LOG_STREAM_NAME, list /var/task, and read parent process cmdline from /proc, then POST the collected host and environment metadata as JSON to a hardcoded webhook.site endpoint (https://webhook.site/b520829e-516a-45ff-980c-173aa54fc4bc). probe.js copies daemon.js to /tmp/.h1poc-daemon.js and spawns it detached via process.execPath with stdio ignored, writing pid and version to /tmp/.h1poc.pid and /tmp/.h1poc.ver so the process outlives npm install. The daemon polls /tmp every 100ms for sibling /tmp/AC tenant directories, enumerates their service and package subpaths, and POSTs 'seen', heartbeat, and startup events (HOME, AWS_LAMBDA_FUNCTION_NAME, /var/task listing, id output, foreign/owned flags, tenant IDs, service and package names) to the same webhook for ~15 minutes. For tenant IDs in a hardcoded list, daemon.js writes a package.json and index.js under other tenants' node_modules/h1-poc-marker/, injecting a require-able module into another account's dependency tree. The package name and stated purpose reference a HackerOne proof-of-concept, but the shipped mechanisms — install-time exfiltration to an external inspection URL, a detached persistent background process, and cross-tenant writes into other accounts' node_modules — are the same primitives used in operational supply-chain attacks (host reconnaissance, persistence, dependency-tree injection).

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-017957",
            "import_time": "2026-08-15T16:07:56.450384944Z",
            "modified_time": "2026-08-15T15:57:19Z",
            "sha256": "19c2a9d2cdab0b3bd75ce3364e6b3c5476e4740a6af63a39670842113d3fa569",
            "source": "amazon-inspector",
            "versions": [
                "1.0.0"
            ]
        },
        {
            "id": "IN-MAL-2026-017955",
            "import_time": "2026-08-15T16:07:56.293080802Z",
            "modified_time": "2026-08-15T15:57:00Z",
            "sha256": "27261a0c0023966885bee65790482154111bfd73840d6a83021b932b5ae71de4",
            "source": "amazon-inspector",
            "versions": [
                "1.0.3"
            ]
        },
        {
            "id": "IN-MAL-2026-017958",
            "import_time": "2026-08-15T16:07:56.593011574Z",
            "modified_time": "2026-08-15T15:57:31Z",
            "sha256": "6790435b096935699da3234140accc517ced689047a68e698cae06288939eed9",
            "source": "amazon-inspector",
            "versions": [
                "1.0.2"
            ]
        },
        {
            "id": "IN-MAL-2026-017956",
            "import_time": "2026-08-15T16:07:56.367370475Z",
            "modified_time": "2026-08-15T15:57:09Z",
            "sha256": "7ceeddfe5d15cd9d4a4a688dafd12102fbf03e042123e741260bd35307885cac",
            "source": "amazon-inspector",
            "versions": [
                "1.0.4"
            ]
        },
        {
            "id": "IN-MAL-2026-017960",
            "import_time": "2026-08-15T16:07:56.718081241Z",
            "modified_time": "2026-08-15T15:57:47Z",
            "sha256": "e0e79177a677066c80be0c324268d57dc6174c9051546a4e7c325e4d6854e987",
            "source": "amazon-inspector",
            "versions": [
                "1.0.1"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / twilio-hackerone-poc-afe6937c

Package

Name
twilio-hackerone-poc-afe6937c
View open source insights on deps.dev
Purl
pkg:npm/twilio-hackerone-poc-afe6937c

Affected ranges

Affected versions

1.*
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "probe.js",
            "sha256": "92cfb4306c6236f003b9d104be49da3ef8ac79daaa4ab2925fc31494c2cf94a3",
            "tlsh": "0f3144d2a6b14350279205cba16b2341b6b7da113d4c94f0f5ac649f2f8f5145a739fc"
        },
        {
            "path": "daemon.js",
            "sha256": "72e08face07965b764762a215ff6aeca0f3fce3b1071c6b1770f9e4f6b6b74b8",
            "tlsh": "265176c1c2b2739c0b66425ad36b17806073c15a35c3ca94b46cb8db6fc2a4453df96c"
        }
    ],
    "package_integrity": [
        {
            "filename": "twilio-hackerone-poc-afe6937c-1.0.0.tgz",
            "hashes": {
                "sha1": "4d516302b0851d5f25f8e21d613cf4d2094b4207",
                "sha512_sri": "sha512-kse8R43OiwxiHjYUhdLlGvJ4vONYkjJqUAAIoBIiGyJJkfP9tE3fA1r1c/ifZz67gN2HG5eXhVI2M5sP2ev54A=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/twilio-hackerone-poc-afe6937c/MAL-2026-14063.json"