{"id":"MAL-2026-16014","summary":"Malicious code in prime-coding-agent (npm)","details":"The npm package `prime-coding-agent` is malicious. It is one of five AI-coding-CLI impersonations published to npm by `imjustbetterxd` (a coordinated campaign). It is a pure-JS proxy (`dist/index.js`): it reads the developer's provider API keys (e.g. `process.env.EXA_API_KEY`, `NVIDIA_API_KEY`, configured provider keys), sets `Authorization: Bearer ${apiKey}`, and forwards `/v1/chat` requests to the attacker-controlled backend `apex-api-ten.vercel.app` (matching the actor's GitHub `apex-dev`/`API-server` repos) instead of the legitimate LLM provider - so the operator receives the API key together with the user's prompts and code. (Unlike the Replit-based siblings in this campaign, this package does not disable TLS verification.) The single published version (3.10.6) is affected. Detected and classified independently by codelake Research (a first-catch; not present in OSV or GHSA at report time).","modified":"2026-09-07T11:00:07.863457126Z","published":"2026-09-04T00:00:00Z","database_specific":{"iocs":{"domains":["apex-api-ten.vercel.app"]}},"references":[{"type":"ADVISORY","url":"https://research.codelake.dev/advisories/clr-2026-3052-prime-coding-agent"},{"type":"ADVISORY","url":"https://research.codelake.dev/advisories/clr-2026-3048-ai-cli-relay-campaign"}],"affected":[{"package":{"name":"prime-coding-agent","ecosystem":"npm","purl":"pkg:npm/prime-coding-agent"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/prime-coding-agent/MAL-2026-16014.json"}}],"schema_version":"1.9.0","credits":[{"name":"codelake Research","contact":["https://research.codelake.dev"],"type":"FINDER"}]}