MAL-2026-16145

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/concierge-sdk/MAL-2026-16145.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-16145
Published
2026-09-14T15:42:39Z
Modified
2026-09-14T17:30:06Z
Summary
Malicious code in concierge-sdk (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (4de458111994244a0a590117185f9e345ff27043c129d4ea24fcb3be5f98f67b)

The package's declared postinstall script executes exfil_v2.js at npm install time. That script harvests the full process environment, current working directory, and config/secret files (.env, secrets.json, /etc/environment, /etc/profile, workflow files, git-history secret matches), curls the Azure Instance Metadata Service at 169.254.169.254 to obtain a managed-identity access token for vault.azure.net and lists Key Vault secrets with it, and uses the runner's GITHUB_TOKEN against api.github.com to read repository secrets and Actions artifacts. All collected data is POSTed to a hardcoded webhook.site endpoint. A sibling exfil.js duplicates full process.env exfiltration to the same webhook.site collector under User-Agent continental-sdk/1.0.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-020020",
            "import_time": "2026-09-14T16:19:12.191097464Z",
            "modified_time": "2026-09-14T15:42:39Z",
            "sha256": "63196bb3ca7cbb7e065a9cff120941ff3c3558c86ed1d40d6334384d4ce0a94c",
            "source": "amazon-inspector",
            "versions": [
                "99.99.101"
            ]
        },
        {
            "id": "IN-MAL-2026-020026",
            "import_time": "2026-09-14T17:15:20.896144263Z",
            "modified_time": "2026-09-14T16:44:54Z",
            "sha256": "4de458111994244a0a590117185f9e345ff27043c129d4ea24fcb3be5f98f67b",
            "source": "amazon-inspector",
            "versions": [
                "99.99.100"
            ]
        },
        {
            "id": "IN-MAL-2026-020027",
            "import_time": "2026-09-14T17:15:20.982428207Z",
            "modified_time": "2026-09-14T16:45:05Z",
            "sha256": "66484d698cb071edcee1b1fff6236fd881a151ef065c450e8bdee218c48fe3a9",
            "source": "amazon-inspector",
            "versions": [
                "99.99.99"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / concierge-sdk

Package

Name
concierge-sdk
View open source insights on deps.dev
Purl
pkg:npm/concierge-sdk

Affected ranges

Affected versions

99.*
99.99.99
99.99.100
99.99.101

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "exfil_v3.js",
            "sha256": "5df9dee9342f80d6641d8ef65a6b79a976286f607c0a820fc83f88167632d60a",
            "tlsh": "2651326247e6417165e1e5872a1fa04b7603e0aa3612edf436dc03352f89b3866f36e9"
        }
    ],
    "package_integrity": [
        {
            "filename": "concierge-sdk-99.99.101.tgz",
            "hashes": {
                "sha1": "7738e6e9557385f4adafddb9d1ac5bbbe69896b1",
                "sha512_sri": "sha512-bTXyP8PqheAcMRLAeWJwOj8rdswFpLN8hoGacKeiT6EwuxgqNIEjQJve+za/Tc6uyyR/vVEYHyRUODEG3hU0Aw=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/concierge-sdk/MAL-2026-16145.json"