MAL-2026-16014

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/prime-coding-agent/MAL-2026-16014.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-16014
Published
2026-09-04T00:00:00Z
Modified
2026-09-07T11:00:07Z
Summary
Malicious code in prime-coding-agent (npm)
Details

The npm package prime-coding-agent is malicious. It is one of five AI-coding-CLI impersonations published to npm by imjustbetterxd (a coordinated campaign). It is a pure-JS proxy (dist/index.js): it reads the developer's provider API keys (e.g. process.env.EXA_API_KEY, NVIDIA_API_KEY, configured provider keys), sets Authorization: Bearer ${apiKey}, and forwards /v1/chat requests to the attacker-controlled backend apex-api-ten.vercel.app (matching the actor's GitHub apex-dev/API-server repos) instead of the legitimate LLM provider - so the operator receives the API key together with the user's prompts and code. (Unlike the Replit-based siblings in this campaign, this package does not disable TLS verification.) The single published version (3.10.6) is affected. Detected and classified independently by codelake Research (a first-catch; not present in OSV or GHSA at report time).

Database specific 
{
    "iocs": {
        "domains": [
            "apex-api-ten.vercel.app"
        ]
    }
}
References
Credits

Affected packages

npm / prime-coding-agent

Package

Name
prime-coding-agent
View open source insights on deps.dev
Purl
pkg:npm/prime-coding-agent

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/prime-coding-agent/MAL-2026-16014.json"