MAL-2026-4524

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/claude-content-writer/MAL-2026-4524.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-4524
Published
2026-05-21T21:49:07Z
Modified
2026-05-26T06:02:11Z
Summary
Malicious code in claude-content-writer (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (b38e69b148dc7998c9ab02fb5b6c2a90413a88129cf7db96b1c900e9c830f719)

On npm install, the package's postinstall hook runs scripts/install-dependencies.sh, which performs git clone --depth 1 https://github.com/AgriciDaniel/claude-seo.git and git clone of github.com/blader/humanizer into ~/.claude/skills with no commit pinning, then cd claude-seo && bash install.sh. The cloned repositories are personal GitHub accounts unrelated to the package publisher; whatever code their maintainers (or an attacker who takes over either account) push to HEAD will execute on every installer's machine at install time. There is no integrity verification, version pinning, or publisher-matching for the fetched code. Additionally, package.json declares the package itself as a dependency (claude-content-writer: ^2.0.1), which expands the install-time trust surface unpredictably by pulling another published version of the same package during resolution.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-004037",
            "import_time": "2026-05-26T05:51:49.062216674Z",
            "modified_time": "2026-05-21T21:49:07Z",
            "sha256": "b38e69b148dc7998c9ab02fb5b6c2a90413a88129cf7db96b1c900e9c830f719",
            "source": "amazon-inspector",
            "versions": [
                "2.2.0"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / claude-content-writer

Package

Name
claude-content-writer
View open source insights on deps.dev
Purl
pkg:npm/claude-content-writer

Affected ranges

Affected versions

2.*
2.2.0

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "scripts/install-dependencies.sh",
            "sha256": "750146696cda9c5c30ad958281a013be61cf83c659cf89b422842f54b6128f86",
            "tlsh": "d6918dbd710c72723c8a817d2ab36581324b351b45140c3b72ef88a5af455dca7fe2b9"
        },
        {
            "path": "package.json",
            "sha256": "23f7760a80722844180d5cb2823165cbef1192336d9b8024d5f651fec46fd8c6",
            "tlsh": "cb312d72c91429722fd060a049a7618aaa25d503cf093c5837e7414c8fdea9f10fbb2d"
        }
    ],
    "package_integrity": [
        {
            "filename": "claude-content-writer-2.2.0.tgz",
            "hashes": {
                "sha1": "2d4e09bee6a2c0cc7c76ff9bafa211aa7687eded",
                "sha512_sri": "sha512-QkNpkk+a2z8eyn/9z8X5sWQ6eNxVpsaAlW8i8NaJCiuwIASptS0wVwJr5Gkb3yt9weqTRte9tKLQGJiN2LJSiQ=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/claude-content-writer/MAL-2026-4524.json"