{"id":"MAL-2026-10096","summary":"Malicious code in guest-app-ui (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (5244faa59fb08eaa6dec10250fe2218a4909cb06ecc6ac972fda38b144f2aaef)\nPackage publishes as version 99.0.0 under a name presented in its README as an unclaimed internal name, positioning it to win dependency-confusion resolution against private registries. Both preinstall and postinstall lifecycle hooks in package.json execute callback.js, which collects installer host identifiers (os.hostname(), process.env.USER, process.cwd(), __dirname, platform/release, internal IPv4 addresses, and process.env.npm_config_registry), base64url-encodes the payload, and transmits it over three redundant channels to the hardcoded host 4li9yfz7.instances.httpworkbench.com: a DNS lookup/resolve4 with the payload as a subdomain label, an HTTP POST, and an HTTPS POST with TLS verification disabled (rejectUnauthorized: false). Any organization that has a private package by this name and lacks a scope/registry pin will pull this public artifact on npm install and beacon host fingerprint data to the external interaction host. The self-labeling as an authorized research PoC does not gate the behavior — every installer of this name is fingerprinted unconditionally.\n","modified":"2026-07-09T21:16:56.629315117Z","published":"2026-07-09T20:43:04Z","database_specific":{"malicious-packages-origins":[{"import_time":"2026-07-09T21:03:50.942744924Z","modified_time":"2026-07-09T20:43:04Z","sha256":"5244faa59fb08eaa6dec10250fe2218a4909cb06ecc6ac972fda38b144f2aaef","source":"amazon-inspector","versions":["99.0.0"],"id":"IN-MAL-2026-009398"}]},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/guest-app-ui/v/99.0.0"}],"affected":[{"package":{"name":"guest-app-ui","ecosystem":"npm","purl":"pkg:npm/guest-app-ui"},"versions":["99.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"callback.js","sha256":"5861f7d31fe175bddba0e5f4d21339ba2af45bbf65502dd4c02aef5f613602a8","tlsh":"6b61a7ae20b5b42922f335e1454fa425a473f154828ad7c0b41cd2a85f7d1b803b7dfd"},{"sha256":"ae407ca10f34dd1ae7675a8f06d37672d963df4d56c82a9de1ef4d3d79ab8ef2","tlsh":"4001dc62b70563332cf05bea542d62b62520df265a4b85144a6b2218821f3e603be79b","path":"package.json"}],"package_integrity":[{"hashes":{"sha1":"11a9ec1edb52f3dbc736823cf818937eb56b03c1","sha512_sri":"sha512-yYsUyhx3f03KB1iq46qgHf0QustiHbiRXgt2n6Hz3ei5GU+4SSND89CVFeqT5Pj6MTryaN/KVx497sVbqn7EqA=="},"filename":"guest-app-ui-99.0.0.tgz"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/guest-app-ui/MAL-2026-10096.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}