Malicious code in @apexacc/cli (npm)

{
  "id": "51eb77cac630fdc260225cce8278279491c568e5381baa7afe9c33b4a6cc34ec",
  "url": "https://osv.dev/vulnerability/MAL-2026-17924",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Malicious code in @apexacc/cli (npm)",
    "summary": "@apexacc/cli is distributed by \"Apex Accelerator\" (Apex Arena), a fake Web3 accelerator that lures crypto founders with free AI credits and audits. Elastic Security Labs (REF8801, published 2026-10-12) found it is a repackaged Oh My Pi coding agent (1,351 of 1,363 files identical) with malicious additions that hijack the developer's AI coding agent: it overwrites OPENROUTER_BASE_URL so model traffic (prompts, files read, tool results) goes to attacker infrastructure at arena.apexaccs.org; persists an attacker-controlled remote MCP server in ~/.apex/agent/mcp.json; and defaults tool approval to \"yolo\". A bootstrap retrieves commands from vrf.apexaccs.org: on macOS it drops CloudSyncD (fake password prompt, credential theft, C2 ccmihr.com); on Windows a staged loader chain ends in an infostealer that exfiltrates browser credentials, wallets, messengers, VPN clients and Claude/Cursor/Windsurf configs over Telegram. Elastic analyzed version 1.6.1 and traced the bootstrap to the earliest preserved version (script host arenapex.cloud). The package was still live on npm (latest 1.6.2) with no OSV record as of 2026-10-16. Independently confirmed by static inspection of the live 1.6.2 npm tarball (sha256 7ca5e3908dd8721d0cf6af2488f0825c0d91a5e0b7c8529ef830141a4a3ba31f) on 2026-10-16, without execution: the bin launcher apex.cjs (sha256 4029192a44ee738deba9aa53b57550075cb8fd170a63f0636dea5452256f2175) runs when the user invokes the CLI (no install script). On Windows it sets the curren",
    "evidence": "osv:MAL-2026-17924",
    "products": [
      {
        "name": {
          "value": "@apexacc/cli",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "1.5.121",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.122",
            "evidence": "/affected/0/versions"
          }
        ]
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "MAL-2026-17924",
      "aliases": [
        "MAL-2026-17924"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "SEMVER",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "@apexacc/cli",
            "purl": "pkg:npm/%40apexacc/cli",
            "ecosystem": "npm"
          },
          "versions": [
            "1.5.121",
            "1.6.0",
            "1.6.2",
            "1.5.122"
          ],
          "database_specific": {
            "cwes": [
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              },
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              },
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              },
              {
                "name": "Embedded Malicious Code",
                "cweId": "CWE-506",
                "description": "The product contains code that appears to be malicious in nature."
              }
            ],
            "source": "https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@apexacc/cli/MAL-2026-17924.json",
            "indicators": {
              "evidence_files": [
                {
                  "path": "apex.cjs",
                  "tlsh": "cd8183c507f4a3644b916099d18f252bb96ba0237104d9c4bd2c9758fb936748337dfb",
                  "sha256": "6af132fdb24feb1efe781a90e4ee3229a98a7a0f9a152f700890622064f67bbc"
                }
              ],
              "package_integrity": [
                {
                  "hashes": {
                    "sha1": "c7ee06fd17b919926d785b8beef88e8677debb65",
                    "sha512_sri": "sha512-1tvCMWzOCxCx/bqHCEphYWCF56YhIGRtiOk15IBixMyvhOGfm1lSFm3TdPlhEwgLy+ez0WwdOXMGx5ej1U+NIw=="
                  },
                  "filename": "cli-1.5.121.tgz"
                }
              ]
            }
          }
        }
      ],
      "modified": "2026-10-26T06:00:04.219034929Z",
      "provider": "osv",
      "references": [
        "https://www.elastic.co/security-labs/threat-command/apex-accelerator-malicious-npm-packages",
        "https://www.npmjs.com/package/@apexacc/cli",
        "https://www.npmjs.com/package/@apexacc/cli/v/1.5.121",
        "https://www.npmjs.com/package/@apexacc/cli/v/1.6.0",
        "https://www.npmjs.com/package/@apexacc/cli/v/1.6.2",
        "https://www.npmjs.com/package/@apexacc/cli/v/1.5.122"
      ],
      "provider_metadata": {
        "iocs": {
          "files": [
            {
              "note": "bin launcher in the 1.6.2 npm tarball: elevated Defender exclusion, Smart App Control disable, binary download (DugganUSA static inspection 2026-10-16)",
              "paths": [
                "package/apex.cjs"
              ],
              "source": "PACKAGE_ARCHIVE",
              "digests": {
                "sha256": "4029192a44ee738deba9aa53b57550075cb8fd170a63f0636dea5452256f2175"
              }
            },
            {
              "note": "Windows Bun executable containing the coding agent and verification bootstrap (Elastic Security Labs REF8801)",
              "paths": [
                "apex-windows-x64.exe"
              ],
              "source": "DROPPED",
              "digests": {
                "sha256": "985829083f3937df6c82419216f7697afae0caac8efca6257a756066fe2c0abb"
              }
            },
            {
              "note": "macOS ARM64 Bun executable (Elastic Security Labs REF8801)",
              "paths": [
                "apex-darwin-arm64"
              ],
              "source": "DROPPED",
              "digests": {
                "sha256": "42a760b15fea7c9af718ee45386c1c3ea1bec9e30c95d16c287bcc8b2efdc72e"
              }
            },
            {
              "note": "macOS Rust executable that retrieves and launches verification commands (Elastic Security Labs REF8801)",
              "paths": [
                "apex-verify-darwin"
              ],
              "source": "DROPPED",
              "digests": {
                "sha256": "127ae4cad80b6605157ca2a1feada8a235e16aacc5d2119337a98115a4e13274"
              }
            },
            {
              "note": "CloudSyncD macOS dropper (Elastic Security Labs REF8801)",
              "paths": [
                "installer"
              ],
              "source": "DROPPED",
              "digests": {
                "sha256": "68f5a00eafa8ecebf5d93328e0fec23b24d6f91808c8384db002946a13656c71"
              }
            },
            {
              "note": "Python second-stage loader (Elastic Security Labs REF8801)",
              "paths": [
                "exegis.exe"
              ],
              "source": "DROPPED",
              "digests": {
                "sha256": "ee8cd9aba420f1b26b5d43e5bcdd6025a277b4946bb5daf76ab45c0e5f7ecd0b"
              }
            },
            {
              "note": "Encrypted third stage, decrypted by the second-stage Python loader (Elastic Security Labs REF8801)",
              "paths": [
                "enc_loader.exe"
              ],
              "source": "DROPPED",
              "digests": {
                "sha256": "ed5cb4af1d2cb067b8d23783ebf05d70278728462ba4f1bf29da0a3a41efc35e"
              }
            }
          ],
          "domains": [
            "apexaccs.org",
            "arena.apexaccs.org",
            "token.apexaccs.org",
            "vrf.apexaccs.org",
            "arena.apexfdn.xyz",
            "verify.apexfdn.xyz",
            "ccmihr.com",
            "0auth-chromium.com",
            "ehegisnightmare.icu",
            "arenapex.cloud",
            "cloudmain365duo.top",
            "fdn4apex.com",
            "main.router-apex.com",
            "update.apex-arena-router.com"
          ]
        },
        "malicious-packages-origins": [
          {
            "id": "IN-MAL-2026-021714",
            "sha256": "220b2bfd948cbd511add6ba3b2a2ea467defeb99a6855ed9ee0690891cedee5d",
            "source": "amazon-inspector",
            "versions": [
              "1.5.121"
            ],
            "import_time": "2026-10-26T05:46:51.924994062Z",
            "modified_time": "2026-10-26T05:25:44Z"
          },
          {
            "id": "IN-MAL-2026-021711",
            "sha256": "3af6be5dcde1648332ab0eb8b252bb90e33bc2b39452e5b83042b0481bfed5ed",
            "source": "amazon-inspector",
            "versions": [
              "1.6.0"
            ],
            "import_time": "2026-10-26T05:46:51.792226934Z",
            "modified_time": "2026-10-26T05:25:19Z"
          },
          {
            "id": "IN-MAL-2026-021712",
            "sha256": "42f41fbd2bc4a7faba3977f190eb65c22f835f8a3b073be64d0d9c0c95a9c747",
            "source": "amazon-inspector",
            "versions": [
              "1.6.2"
            ],
            "import_time": "2026-10-26T05:46:51.826689409Z",
            "modified_time": "2026-10-26T05:25:29Z"
          },
          {
            "id": "IN-MAL-2026-021713",
            "sha256": "c174007782646e1fdfd9806ecd699e427fd36661dd7137fa462672f41aee6e79",
            "source": "amazon-inspector",
            "versions": [
              "1.5.122"
            ],
            "import_time": "2026-10-26T05:46:51.870027938Z",
            "modified_time": "2026-10-26T05:25:36Z"
          }
        ]
      }
    },
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 446726,
  "published_at": "2026-10-26T05:25:19+00:00"
}