MAL-2026-4568

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/fulcrum-sessions/MAL-2026-4568.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-4568
Published
2026-05-20T04:18:24Z
Modified
2026-05-26T06:02:34.371315386Z
Summary
Malicious code in fulcrum-sessions (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (f3971399e0fb1bd6c61f5306557512ed22dc0605747526b600b08626a50eb31e)

src/config.js hardcodes a live Telegram bot token (bot id 8656735452) and a default groupId (-1003974755050) pointing at a chat owned by the package author. getConfig() falls back to these defaults when the installer has not set TELEGRAMBOTTOKEN or edited ~/.fulcrum-sessions/config.json. The package's purpose is to bridge a Claude Code session to Telegram, so following the README quick-start (npm install -g fulcrum-sessions && fulcrum-sessions setup && fulcrum-sessions start) without first overriding the defaults causes every session message, voice transcript, photo, and document handled by the proxy to be polled from and POSTed to api.telegram.org as the author's bot — landing the installer's Claude Code conversation contents in the author's Telegram group. Nothing in the code enforces configuration before the daemon begins polling/sending. Additionally, the embedded bot token is a live third-party credential distributed to every installer, allowing anyone who reads the tarball to act as that bot against Telegram (read group updates, send messages). A separately-shipped Unsplash access key is author-self-harm only and not a basis for the verdict.

Database specific 
{
    "malicious-packages-origins": [
        {
            "source": "amazon-inspector",
            "sha256": "ac82cf36a305545f8a74253f02cf75a7916409575e42abf67ba42d8ef1f26c58",
            "versions": [
                "1.0.1"
            ],
            "import_time": "2026-05-26T05:50:41.553519853Z",
            "id": "IN-MAL-2026-003464",
            "modified_time": "2026-05-20T04:48:32Z"
        },
        {
            "id": "IN-MAL-2026-003460",
            "sha256": "f3971399e0fb1bd6c61f5306557512ed22dc0605747526b600b08626a50eb31e",
            "import_time": "2026-05-26T05:50:41.113364653Z",
            "modified_time": "2026-05-20T04:18:24Z",
            "source": "amazon-inspector",
            "versions": [
                "1.1.0"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / fulcrum-sessions

Package

Name
fulcrum-sessions
View open source insights on deps.dev
Purl
pkg:npm/fulcrum-sessions

Affected ranges

Affected versions

1.*
1.0.1
1.1.0

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
indicators 
{
    "package_integrity": [
        {
            "filename": "fulcrum-sessions-1.0.1.tgz",
            "hashes": {
                "sha1": "0b3d2de1fd65a47d7fcb16cb03066bd64a64373c",
                "sha512_sri": "sha512-xL2sknAnoGsiJVnEPXHE4DYdtnNuyCwSIctM9dWbU75CL0XcE2FfSvgQOGvxLiLAG3OEx5o3SdNXBggXhckINQ=="
            }
        }
    ],
    "evidence_files": [
        {
            "tlsh": "a451ecab3ef55b6487a2d15cc69fc105b1a2f44b7a08f920f4aa5be43f3d82952360c4",
            "sha256": "ad79472bccf32956baa8b6833de6371f13817d23a66bf2d87385c0370b180fcf",
            "path": "src/config.js"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/fulcrum-sessions/MAL-2026-4568.json"