{"id":"MAL-2026-13428","summary":"Malicious code in @love-moon/conductor-cli (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (7ea5d4f1af0a0b67e6f74bfb45867ce0b33136083138e3c23a56df03d8b5c902)\nThe `conductor daemon` command (bin/conductor-daemon.js -\u003e src/daemon.js) opens a WebSocket to https://conductor.conductor-ai.top (or a user-configured backend_url) and registers a message handler that, in `handleTerminalInput`, writes `payload.data` received from the server directly into a node-pty process. The PTY is spawned by `handleCreatePtyTask` running either the user's default shell (/bin/bash, /bin/zsh, cmd.exe, $SHELL) or a CLI from DEFAULT_CLI_LIST, which launches `codex --dangerously-bypass-approvals-and-sandbox` and `claude --dangerously-skip-permissions` — the same flags are written into the generated config.yaml by bin/conductor-config.js. Any party controlling the WebSocket peer (the Conductor backend, an impersonator on the network, or a compromised backend account) can drive arbitrary commands into the installer's shell or into an AI CLI whose local approval/sandbox gates have been disabled by default. The remote-command channel and the disabled-safety flags together provide full-host command execution driven by conductor-ai.top.\n","modified":"2026-08-06T15:34:46.288868903Z","published":"2026-08-06T14:31:35Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2026-08-06T14:32:00Z","sha256":"06daab6c255b360b523604e96d4a4748abac14e273ce477a57ba026ffb565147","source":"amazon-inspector","versions":["0.7.5"],"id":"IN-MAL-2026-016650","import_time":"2026-08-06T15:19:35.187618111Z"},{"sha256":"40dd644866a41ae1d46e83ead8f7fc7df120162a3ec4d8b0c9b7da03aea378e2","source":"amazon-inspector","versions":["0.7.4"],"id":"IN-MAL-2026-016649","import_time":"2026-08-06T15:19:35.146421678Z","modified_time":"2026-08-06T14:31:51Z"},{"source":"amazon-inspector","versions":["0.8.0"],"id":"IN-MAL-2026-016647","import_time":"2026-08-06T15:19:35.058463407Z","modified_time":"2026-08-06T14:31:35Z","sha256":"7ea5d4f1af0a0b67e6f74bfb45867ce0b33136083138e3c23a56df03d8b5c902"},{"id":"IN-MAL-2026-016648","import_time":"2026-08-06T15:19:35.089355473Z","modified_time":"2026-08-06T14:31:44Z","sha256":"f9873ec7de86743677ae29ec9eb37ff474dec25d6de28d017a5e2123c6afc65d","source":"amazon-inspector","versions":["0.7.6"]}]},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@love-moon/conductor-cli/v/0.7.5"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@love-moon/conductor-cli/v/0.7.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@love-moon/conductor-cli/v/0.8.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@love-moon/conductor-cli/v/0.7.6"}],"affected":[{"package":{"name":"@love-moon/conductor-cli","ecosystem":"npm","purl":"pkg:npm/%40love-moon/conductor-cli"},"versions":["0.7.5","0.7.4","0.8.0","0.7.6"],"database_specific":{"indicators":{"evidence_files":[{"tlsh":"5a24d84969f710324a73e1688bbf5151b73591032e0ceca53e5c97246fad2ac85f3bca","path":"src/daemon.js","sha256":"ea5f473dec92eb5b999575f94f6b5a2c31913c4ff94087c26910d170e189b619"}],"package_integrity":[{"filename":"conductor-cli-0.7.5.tgz","hashes":{"sha1":"bc89c1ba5dfd81651bae984497256c8d68c40144","sha512_sri":"sha512-R5bFlSg8BwAmZv+2be9yNF/SIblmr10HfQQNYqKZYK0w1fs86phUV5A1rQkrmlAFQuQCJoqH+EdF6gjpjatuzQ=="}}]},"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@love-moon/conductor-cli/MAL-2026-13428.json"}}],"schema_version":"1.8.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}