MAL-2026-4484

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/ask-my-llm/MAL-2026-4484.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-4484

Withdrawn

2026-05-26T18:32:24Z

Published

2026-05-23T09:34:22Z

Modified

2026-05-27T00:32:12Z

Summary

Malicious code in ask-my-llm (npm)

Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (9429d8e8e36f3d97c246ce408491ea570ab5d3f5e7cb2481a3c2ea4b7c8477b8)

index.js requires child_process and contains hardcoded POST calls to https://cows.info.gf at lines 67 and 100, alongside references to process.env at line 6 and a spawn('curl',...) invocation at line 108. The combination of a hardcoded non-publisher exfiltration endpoint, environment-variable access, and shell-out to curl in the package's main module constitutes an exfiltration / C2 fingerprint with no benign interpretation: a package describing itself as an LLM helper has no legitimate need to POST to a personal.gf domain or shell out to curl for network I/O when a normal HTTP client would suffice. The endpoint cows.info.gf is not associated with any known LLM provider and is structured as an attacker-controlled drop site.

Database specific

{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-004307",
            "import_time": "2026-05-26T05:52:20.611527481Z",
            "modified_time": "2026-05-23T09:49:18Z",
            "sha256": "183ee8aeb137f55b3262b9193e2647c6b515664699574db8c800a3bb64775c98",
            "source": "amazon-inspector",
            "versions": [
                "1.1.5"
            ]
        },
        {
            "id": "IN-MAL-2026-004306",
            "import_time": "2026-05-26T05:52:20.51406053Z",
            "modified_time": "2026-05-23T09:37:26Z",
            "sha256": "9429d8e8e36f3d97c246ce408491ea570ab5d3f5e7cb2481a3c2ea4b7c8477b8",
            "source": "amazon-inspector",
            "versions": [
                "1.1.4"
            ]
        },
        {
            "id": "IN-MAL-2026-004305",
            "import_time": "2026-05-26T05:52:20.370492417Z",
            "modified_time": "2026-05-23T09:34:22Z",
            "sha256": "f8c55f3e5b658f73805a74a9cc6b7eb47cb2025955e0e7868765f7594c51c8c3",
            "source": "amazon-inspector",
            "versions": [
                "1.1.3"
            ]
        }
    ]
}

References

Credits

- Amazon Inspector - FINDER
- - actran@amazon.com

Affected packages

npm / ask-my-llm

Package

Name: ask-my-llm; View open source insights on deps.dev
Purl: pkg:npm/ask-my-llm

Affected ranges

Affected versions

1.*

1.1.3

1.1.4

1.1.5

Database specific

cwes

[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]

indicators

{
    "evidence_files": [
        {
            "path": "index.js",
            "sha256": "d6ca40a6577eec745bc5820d8dfdd9a6c04c41af495654a789467627ef729622",
            "tlsh": "b481539624ff2e2301a36ba496cf943d2db5b783315de958b1cda3845f88424d1a37d4"
        }
    ],
    "package_integrity": [
        {
            "filename": "ask-my-llm-1.1.5.tgz",
            "hashes": {
                "sha1": "01c947fee34ed1924a333a5498fab1b827d3b37c",
                "sha512_sri": "sha512-itW5zn4dhYyxpKKTAlfM2O8LNBg3S/uMnDeXHv8yJKYzjCF+YmKz1HUsl5ZLOBQCnnX/oDpEUGOS+1nWqANSXw=="
            }
        }
    ]
}

source

"https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/ask-my-llm/MAL-2026-4484.json"