MAL-2026-16345

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/starbucks-sdk/MAL-2026-16345.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-16345
Published
2026-09-20T00:45:28Z
Modified
2026-09-21T05:30:06Z
Summary
Malicious code in starbucks-sdk (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (f42de3e225b6f8d6be04fbf613ae4d17458626c92f2cfe1bf1b4476fe132e761)

The package's package.json declares a preinstall script that runs callback.js on npm install. callback.js collects os.hostname(), os.userInfo(), os.platform(), the current working directory, and a timestamp, then enumerates process.env and selects keys matching /token|secret|key|pass|auth|api|aws/i (up to 10 entries). The collected data is POSTed via https.request to https://api.telegram.org/bot<BOT_TOKEN>/sendMessage using a hardcoded Telegram bot token and chat_id (bot 8636277735, chat_id 1064260758). The name mimics a legitimate vendor SDK but the package's only behavior is install-time reconnaissance and exfiltration of installer/build-host identity and credential-shaped environment variable names to an attacker-controlled Telegram channel — a dependency-confusion recon payload.

Source: ossf-package-analysis (cbea0cf6cf424cbaa524691f90c075f11c4c5265e941abdeab442a53ccbb0caf)

The OpenSSF Package Analysis project identified 'starbucks-sdk' @ 1.0.0 (npm) as malicious.

It is considered malicious because:

  • The package communicates with a domain associated with malicious activity.
Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "IN-MAL-2026-020224",
            "import_time":  "2026-09-21T03:46:37.476637222Z",
            "modified_time":  "2026-09-21T03:29:54Z",
            "sha256":  "f42de3e225b6f8d6be04fbf613ae4d17458626c92f2cfe1bf1b4476fe132e761",
            "source":  "amazon-inspector",
            "versions":  [
                "1.0.0"
            ]
        },
        {
            "import_time":  "2026-09-21T05:19:22.270910164Z",
            "modified_time":  "2026-09-20T00:45:28Z",
            "sha256":  "cbea0cf6cf424cbaa524691f90c075f11c4c5265e941abdeab442a53ccbb0caf",
            "source":  "ossf-package-analysis",
            "versions":  [
                "1.0.0"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / starbucks-sdk

Package

Name
starbucks-sdk
View open source insights on deps.dev
Purl
pkg:npm/starbucks-sdk

Affected ranges

Affected versions

1.*
1.0.0

Database specific

cwes 
[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files":  [
        {
            "path":  "callback.js",
            "sha256":  "5b6efb0aaa20cb1687147d3267a1d7f6cc7ce8f99a5f66ab96980c085524e689",
            "tlsh":  "8f1154ec51f5c45b56ad54e3b097b8082597d0113d06f8a0f8ae02995fc60d4c931ffc"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "starbucks-sdk-1.0.0.tgz",
            "hashes":  {
                "sha1":  "12d8b489bad07e22e5bbc4e8c1673e213ee09412",
                "sha512_sri":  "sha512-hFrxbA5IbwwoVuFFC4Y3u24dzn2h9OW/aVly/W4o+0AQIL5bbhIXkaMLZsORVYR72eieFKRRgrk/88l/bQIn3w=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/starbucks-sdk/MAL-2026-16345.json"