Malicious code in nitro-bundled-dep (npm)

{
  "id": "e839c685fb7d5f0c2ddaeb023f0c3d6b64a86b3b493950cae9e56c1774019a32",
  "url": "https://osv.dev/vulnerability/MAL-2026-17774",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Malicious code in nitro-bundled-dep (npm)",
    "summary": "--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (893585fb7fdf6e13f0b443e3bd8bd84e8ba1a7c88400ecf5aa9a144a06acd622) The npm package nitro-bundled-dep@0.0.1 presents itself as a 'Compatibility shim' but ships a beacon that POSTs installer host metadata — hostname, install path, current working directory, and Node version — to the hardcoded bare-IP endpoint http://185.158.107.175:8787/_ah/dc over plain HTTP. The beacon in beacon.cjs is invoked from package.json's postinstall script, so it fires automatically on `npm install`, and is also invoked from index.js so it fires again whenever the module is required. The main module exports a Proxy that returns no-op functions for any property access, allowing a victim build that imports this name to continue without errors after the beacon has executed — the shape of a dependency-confusion / name-squat payload whose purpose is to confirm successful code execution inside a target build environment and report host identifiers to an attacker-controlled collector.",
    "evidence": "osv:MAL-2026-17774",
    "products": [
      {
        "name": {
          "value": "nitro-bundled-dep",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "99.0.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "2.0.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.1.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.0.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.0.0",
            "evidence": "/affected/0/versions"
          }
        ]
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "MAL-2026-17774",
      "aliases": [
        "MAL-2026-17774"
      ],
      "affected": [
        {
          "package": {
            "name": "nitro-bundled-dep",
            "purl": "pkg:npm/nitro-bundled-dep",
            "ecosystem": "npm"
          },
          "versions": [
            "99.0.1",
            "2.0.1",
            "1.1.0",
            "0.0.1",
            "1.0.0"
          ],
          "database_specific": {
            "cwes": [
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              },
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              },
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              },
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              },
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              }
            ],
            "source": "https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/nitro-bundled-dep/MAL-2026-17774.json",
            "indicators": {
              "evidence_files": [
                {
                  "path": "beacon.cjs",
                  "tlsh": "9d3161eba8f1a0489aaa7098c54f0409b17bf0078401af50fd6c83919f6193c33fa8dc",
                  "sha256": "714abd13896833fdc6225b6cf615e48f4372fa51e5843cd3190a82b74ecfcce0"
                },
                {
                  "path": "index.js",
                  "tlsh": "2201d0d7225661b10b5221a4978f43c4a3b99d74027941d0d84a9226365108c463b8ee",
                  "sha256": "a86a4da763bbb34c16f361abe7aab66d5df591b66867ac8160041f932159b08d"
                }
              ],
              "package_integrity": [
                {
                  "hashes": {
                    "sha1": "b9251a9e983d4dbfc3b82d85a6745dc00cd4e98b",
                    "sha512_sri": "sha512-/rMcdKmg0buD3+b8YiOufdpoPIR/8L2PD/+8/5v7dK7RSVn3yhHIBeuUtpue2uw12T/JsLQK+r6/wRkCV7tryA=="
                  },
                  "filename": "nitro-bundled-dep-99.0.1.tgz"
                }
              ]
            }
          }
        }
      ],
      "modified": "2026-10-12T14:30:19.834247737Z",
      "provider": "osv",
      "references": [
        "https://www.npmjs.com/package/nitro-bundled-dep/v/99.0.1",
        "https://www.npmjs.com/package/nitro-bundled-dep/v/2.0.1",
        "https://www.npmjs.com/package/nitro-bundled-dep/v/1.1.0",
        "https://www.npmjs.com/package/nitro-bundled-dep/v/0.0.1",
        "https://www.npmjs.com/package/nitro-bundled-dep/v/1.0.0"
      ],
      "provider_metadata": {
        "malicious-packages-origins": [
          {
            "id": "IN-MAL-2026-021380",
            "sha256": "0bbd4417bf91aba92399be259604511102ec5dfbacebe278a7922cf10c4deac5",
            "source": "amazon-inspector",
            "versions": [
              "99.0.1"
            ],
            "import_time": "2026-10-11T14:18:00.905141556Z",
            "modified_time": "2026-10-11T13:50:38Z"
          },
          {
            "id": "IN-MAL-2026-021400",
            "sha256": "43f38c7ac6c0c53ea6787893d1a02c96e0a328e447c151104791f5b1ec4be0a3",
            "source": "amazon-inspector",
            "versions": [
              "2.0.1"
            ],
            "import_time": "2026-10-11T14:18:02.511535763Z",
            "modified_time": "2026-10-11T13:53:42Z"
          },
          {
            "id": "IN-MAL-2026-021389",
            "sha256": "7291ba5dfedba6c562a9cf2641f3ec3f489d8d05721836f4fb2a1674ef4e808a",
            "source": "amazon-inspector",
            "versions": [
              "1.1.0"
            ],
            "import_time": "2026-10-11T14:18:01.639057095Z",
            "modified_time": "2026-10-11T13:52:07Z"
          },
          {
            "id": "IN-MAL-2026-021462",
            "sha256": "893585fb7fdf6e13f0b443e3bd8bd84e8ba1a7c88400ecf5aa9a144a06acd622",
            "source": "amazon-inspector",
            "versions": [
              "0.0.1"
            ],
            "import_time": "2026-10-12T14:26:36.174873037Z",
            "modified_time": "2026-10-12T14:22:58Z"
          },
          {
            "id": "IN-MAL-2026-021461",
            "sha256": "ebf09359ca313a9c519ccfce35a0abe94dc2c84ceadb367388c76415bd64cf60",
            "source": "amazon-inspector",
            "versions": [
              "1.0.0"
            ],
            "import_time": "2026-10-12T14:26:35.995050146Z",
            "modified_time": "2026-10-12T14:22:47Z"
          }
        ]
      }
    },
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 299960,
  "published_at": "2026-10-11T13:50:38+00:00"
}