MAL-2026-14376

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/stillm4ddpocs-demo-sprocket/MAL-2026-14376.json
JSON Data
https://api.test.osv.dev/v1/vulns/MAL-2026-14376
Published
2026-08-23T03:13:22Z
Modified
2026-08-23T03:30:17.384455797Z
Summary
Malicious code in stillm4ddpocs-demo-sprocket (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (ced86462ad99b91f0f3e3d344e008ca911a1dccdad5c928cee5da5c651756f1d)

package.json declares scripts.preinstall = 'node index.js'. On install, index.js collects hostname, username, home directory, cwd, local IPv4, public IP (via api.ipify.org, icanhazip.com, ifconfig.me), DNS resolver information, and the consuming project's package.json fields (name, author, repository, homepage), then transmits the payload to the hardcoded callback host da51rv0hb2uc72tg4gvgdepinjcallbk1.oast.fun. Transport uses HTTPS POST and HTTP POST to /poc/<uuid>, plus a covert DNS channel that hex-encodes the payload and issues chunked dns.resolve() queries embedding data in subdomain labels under the same host, explicitly to bypass egress filtering that blocks outbound HTTP. The package is published at version 999.9.12 and the README states this high version was chosen so npm resolves the public copy over any internal package of the same name — the canonical dependency-confusion attack shape. Any installer whose resolver falls through to the public registry has host identity and internal project metadata beaconed to a third-party callback with no opt-in.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-018560",
            "sha256": "ced86462ad99b91f0f3e3d344e008ca911a1dccdad5c928cee5da5c651756f1d",
            "modified_time": "2026-08-23T03:13:22Z",
            "versions": [
                "999.9.12"
            ],
            "import_time": "2026-08-23T03:25:55.359354669Z",
            "source": "amazon-inspector"
        }
    ]
}
References
Credits

Affected packages

npm / stillm4ddpocs-demo-sprocket

Package

Name
stillm4ddpocs-demo-sprocket
View open source insights on deps.dev
Purl
pkg:npm/stillm4ddpocs-demo-sprocket

Affected ranges

Affected versions

999.*
999.9.12

Database specific

indicators 
{
    "evidence_files": [
        {
            "sha256": "35d335248e9b8458bcc6f270576d74deead0c87d82c7e17415776e0307f170fe",
            "path": "index.js",
            "tlsh": "d1e1a59712fa203012623ab8279f58957333d523338aebd0b98d43645fd727953b26da"
        },
        {
            "sha256": "5516a0919be9f80e8740a134cbc183f56ad0c82f32051fe28c9e064bccb55d9c",
            "path": "package.json",
            "tlsh": "bf111038c9504d332ef0a0b94d2925a76263cc3b5d145886e1aa065d6bde65680ff1ae"
        }
    ],
    "package_integrity": [
        {
            "hashes": {
                "sha512_sri": "sha512-NtyeqP0tH+ATchSn+EL4LkqC+N7b9CZEnAutyyhudDzcNXOV1r+LZyseGdBjch+Z1VvUVWAo/SP8t1Wi9fTA0A==",
                "sha1": "9290cb924ecc463e3f21d9290a62d445379f7357"
            },
            "filename": "stillm4ddpocs-demo-sprocket-999.9.12.tgz"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/stillm4ddpocs-demo-sprocket/MAL-2026-14376.json"
cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]