MAL-2026-4676

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/svharness/MAL-2026-4676.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-4676
Published
2026-05-20T09:46:29Z
Modified
2026-05-26T06:02:57.261441576Z
Summary
Malicious code in svharness (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (3aef9a7535c16df930fdb10e5b60773f5ba2e0a8cd102d53a4cc3da122cfd473)

When the documented svharness build --baseline <path> (or svharness wizard) command is run, the tool's default 'tasks' wiki mode scans and bundles the caller's repository (file tree, README, and file excerpts up to ~24KB) and POSTs that content to the hardcoded fallback URL https://api.laozhang.ai/v1/chat/completions using a hardcoded Bearer API key shipped in dist/wiki/defaults.js. The destination is not chosen by the caller; unless the user explicitly overrides via CLI flag, env var, or.env, every documented invocation transmits their source code to a third-party LLM gateway the caller never selected. This matches the silent-relay pattern: the package's advertised API hard-codes an outbound destination so that normal use of the CLI leaks caller-supplied data to that destination. Additionally, the embedded sk-... Bearer token in dist/wiki/defaults.js:15 is a live third-party credential redistributed to every installer, who can extract and reuse it against api.laozhang.ai. A secondary plain-HTTP relay (http://markitdown.desaysz.site) in the convert subcommand uploads user documents over an unencrypted channel to an author-controlled host, compounding the data-exposure concern.

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "0.13.5"
            ],
            "sha256": "3aef9a7535c16df930fdb10e5b60773f5ba2e0a8cd102d53a4cc3da122cfd473",
            "modified_time": "2026-05-20T09:46:29Z",
            "source": "amazon-inspector",
            "id": "IN-MAL-2026-003514",
            "import_time": "2026-05-26T05:50:46.377929386Z"
        }
    ]
}
References
Credits

Affected packages

npm / svharness

Package

Name
svharness
View open source insights on deps.dev
Purl
pkg:npm/svharness

Affected ranges

Affected versions

0.*
0.13.5

Database specific

indicators 
{
    "package_integrity": [
        {
            "filename": "svharness-0.13.5.tgz",
            "hashes": {
                "sha512_sri": "sha512-faJtjLX4VPA1ka9xDwq6joGf1yrR7cTAtfWqMshVKIWa6XbKXJVsUhMqDvtoXZ4ja8K70O8P4gBpGzHZSWrVOw==",
                "sha1": "4879f49984fd8a68149d88d2191a929fbfa46822"
            }
        }
    ],
    "evidence_files": [
        {
            "sha256": "0d2574b7eb0856c6c8c8307a2d2f24d9ed752187cdf9119a28de637371590a7a",
            "path": "dist/wiki/defaults.js",
            "tlsh": "ad11ef2f194a676029000cc98365a0d34a0bf20b9ca9a393296b85f4d8b6c47c909fde"
        },
        {
            "sha256": "e76d4d1a775a327830c2553ed02215d07345c90e1ec7c6ad0a284c5711230785",
            "path": "dist/core/markitdown-client.js",
            "tlsh": "97c1a34427f324328693225d133bec326b21452f756bd8a4fb9c03947f4c4b98aaafd4"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/svharness/MAL-2026-4676.json"
cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]