{"id":"MAL-2026-13355","summary":"Malicious code in @astralcore/sl-aura (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (91ae2c72e5e03d23f3f5704859e8c92b9ce6c565c6d14d744d4382b980a0d233)\nThis WhatsApp bot package ships several mechanisms that give the author persistent remote control of any installer's running instance and access to the installer's WhatsApp account. config.env and config/index.js hardcode OWNER_NUMBERS (falling back to '94726800969' when unset) that parser.js uses to set isCreator/isOwner; src/commands/filemanager.js exposes creator-gated WhatsApp commands (.getfile,.putfile,.mkdir,.fullzip) that read arbitrary files under the bot project root, overwrite files, and zip the entire project tree back to the remote party — giving the hardcoded author numbers full file read/write and full-tree exfiltration over WhatsApp. config/index.js also defaults MONGODB_URI to 'mongodb+srv://unity-free:unity-free@unity-free.pc6vkvw.mongodb.net/...', and src/commands/index.js persists the Baileys auth state (creds and signal keys — the full auth material for the paired WhatsApp account) into that database via useMongoDBAuthState, so an installer running with shipped defaults uploads their WhatsApp session credentials to a cluster whose credentials are controlled by the author, enabling remote account takeover. config.env additionally ships live TG_PAIR_BOT_TOKEN and TG_SUPER_BOT_TOKEN plus hardcoded TG_ADMIN_IDS; src/telegram/superBot.js polls these tokens at startup and gates commands (/pair, downloads, session management) on isAdmin() matching those hardcoded IDs, providing a second remote-control channel into every default-configured installer. The package also ships additional third-party credentials belonging to the author (Gemini API key, Gmail SMTP app password, dashboard secret/password).\n","modified":"2026-08-06T14:34:59.436998881Z","published":"2026-08-05T16:34:09Z","database_specific":{"malicious-packages-origins":[{"source":"amazon-inspector","versions":["1.0.6"],"id":"IN-MAL-2026-015826","import_time":"2026-08-05T17:04:49.319800926Z","modified_time":"2026-08-05T16:34:09Z","sha256":"91ae2c72e5e03d23f3f5704859e8c92b9ce6c565c6d14d744d4382b980a0d233"},{"sha256":"ad1b9a5639b6cd7ec75d55d5201a4c899a0c83493837a83659ad0b499d92519d","source":"amazon-inspector","versions":["1.0.0"],"id":"IN-MAL-2026-016500","import_time":"2026-08-06T14:19:52.564570417Z","modified_time":"2026-08-06T13:41:30Z"},{"id":"IN-MAL-2026-016504","import_time":"2026-08-06T14:19:52.74967981Z","modified_time":"2026-08-06T13:42:11Z","sha256":"f3dae0fadf870b0a1b0cf2560c0a9c070e9b59d0151aa73cbf33dcb32a8aeeed","source":"amazon-inspector","versions":["1.0.5"]},{"versions":["1.0.1"],"id":"IN-MAL-2026-016499","import_time":"2026-08-06T14:19:52.512700894Z","modified_time":"2026-08-06T13:41:22Z","sha256":"96b843d40810ff0e688b7567c92de2c5577562063f85be51c568cd7f941148d9","source":"amazon-inspector"},{"versions":["1.0.4"],"id":"IN-MAL-2026-016501","import_time":"2026-08-06T14:19:52.617225422Z","modified_time":"2026-08-06T13:41:38Z","sha256":"991a98ef37ae2e17736c4ead8b8a0fb22b0f32d03792fb831c48fccf4058f1e2","source":"amazon-inspector"}]},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@astralcore/sl-aura/v/1.0.6"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@astralcore/sl-aura/v/1.0.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@astralcore/sl-aura/v/1.0.5"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@astralcore/sl-aura/v/1.0.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@astralcore/sl-aura/v/1.0.4"}],"affected":[{"package":{"name":"@astralcore/sl-aura","ecosystem":"npm","purl":"pkg:npm/%40astralcore/sl-aura"},"versions":["1.0.6","1.0.0","1.0.5","1.0.1","1.0.4"],"database_specific":{"cwes":[{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."}],"indicators":{"evidence_files":[{"tlsh":"d9a194726d48386c3a8bc50ed793fa041a0cf25b790980e0ebca3422b3cc0b998559fd","path":"config.env","sha256":"b2cd6d977cb86bab8e263e4b870be3070b40e8e55f4ee93beef65995d0140d8e"}],"package_integrity":[{"filename":"sl-aura-1.0.6.tgz","hashes":{"sha512_sri":"sha512-HyWI5f95LqbRVkVM1Rh4j+4NdJJ3x/xGOudbrriRL8Vs5NtXeyN8XamFMGe9df/qdwr4w9NtOxi4zFvnx1O4sw==","sha1":"262eb514faddaecd4d967e2f1322e3474e2ed9c8"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@astralcore/sl-aura/MAL-2026-13355.json"}}],"schema_version":"1.8.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}