MAL-2026-14293

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/matrixflow-js/MAL-2026-14293.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-14293
Published
2026-08-19T08:17:00Z
Modified
2026-08-19T09:00:20Z
Summary
Malicious code in matrixflow-js (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (45393245d9a2fca558d1bcb8b7c9d5263c16ff63e9a038a51169b720c85e1352)

matrixflow-js@3.2.1 is a typosquat/repackage of ml-matrix (the UMD global is mlMatrix; homepage matrixflow-js.github.io does not correspond to the real ml-matrix project). Its main module matrix.js routes caller-supplied input from the exported solve() code path into runMatrixFunction in src/common.js. src/common.js hides its crypto/fs/path/child_process requires behind an obfuscated string-array; when SHA-256 of the passed input matches a hardcoded hex digest, it uses scryptSync-derived keying to AES-256-GCM-decrypt the sibling file src/statMatrix.min.js, decodes a base64 blob to recover the string 'child_process', writes the plaintext to a temp file, and spawns node on it in a detached, hidden process (detached:true, windowsHide:true, stdio ignored). Two sibling files stage the payload: src/statMatrix.min.js and src/utilMatrix.min.d.js are pure base64 blobs decoding to opaque AES-GCM ciphertext, and src/statMatrix.min.d.js bundles a full ethers.js (BN, secp256k1, wallet code) under a name mimicking a TypeScript declaration file. An Ethereum wallet SDK plus encrypted opaque payloads in a package advertised for dense matrix computation indicates crypto-wallet-targeting malware. Any downstream application that ships this package and invokes solve() on attacker-chosen input executes the concealed, unauditable payload on end-user hosts.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-018402",
            "import_time": "2026-08-19T08:48:53.280311009Z",
            "modified_time": "2026-08-19T08:17:00Z",
            "sha256": "45393245d9a2fca558d1bcb8b7c9d5263c16ff63e9a038a51169b720c85e1352",
            "source": "amazon-inspector",
            "versions": [
                "3.2.1"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / matrixflow-js

Package

Name
matrixflow-js
View open source insights on deps.dev
Purl
pkg:npm/matrixflow-js

Affected ranges

Affected versions

3.*
3.2.1

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "src/common.js",
            "sha256": "6356f2672bfdf085091bbc8a98bc41923481f3a2467124371a80f3f89c19559f",
            "tlsh": "1c51968e2f8497394bc124fdb45e484ae695ec45d4218b85c689caca7c75b80213b7f8"
        },
        {
            "path": "src/statMatrix.min.js",
            "sha256": "8f6c561caa4c4576bb1a4cd2b95284ca445f61b5b6befbe4fc78f9852abc6ab4",
            "tlsh": "8772dfac0e56be75dab800104a121d13f0eae2456b5ddd9bdb9382d1b041a838b7ae73"
        },
        {
            "path": "matrix.umd.js",
            "sha256": "b731c3e916e406df28cc92d679c6f1a0814245d417701703699bc75a3b371a35",
            "tlsh": "0a63a4b677a098b313f62a8b08664501f519a85c200a5c6cbeecd5e3f9a18c715fff74"
        }
    ],
    "package_integrity": [
        {
            "filename": "matrixflow-js-3.2.1.tgz",
            "hashes": {
                "sha1": "7e22795bb3e612795182becd2945beff967a31c5",
                "sha512_sri": "sha512-vZFPJvDyqYwVy+f7bjGIRmgZcb+6iQz1UFF/deynDsPUiboZm4deSVIrJyEiIAkb6IbfeeB/IBBSf4cBw250Uw=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/matrixflow-js/MAL-2026-14293.json"