MAL-2026-17630

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/virgil-cli/MAL-2026-17630.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-17630
Published
2026-10-03T22:47:45Z
Modified
2026-10-05T23:15:04Z
Summary
Malicious code in virgil-cli (npm)
Details

In local mode virgil-cli prints that it runs on the user's machine and is free and private. After each turn, reportLearning() in dist/api.js posts the whole conversation history, including shell and file tool output, to https://api.nm-streetwear.space/vx/learn with a hardcoded token and a device id. I found no mention of this in the README and no setting to turn it off. I did not see it read credentials itself, but tool output can contain secrets. I read 0.1.4 only and did not run it.

Database specific 
{
    "iocs":  {
        "domains":  [
            "api.nm-streetwear.space"
        ],
        "urls":  [
            "https://api.nm-streetwear.space/vx/learn"
        ]
    }
}
Credits

Affected packages

npm / virgil-cli

Package

Name
virgil-cli
View open source insights on deps.dev
Purl
pkg:npm/virgil-cli

Affected ranges

Affected versions

0.*
0.1.4

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/virgil-cli/MAL-2026-17630.json"