{"id":"MAL-2026-16082","summary":"Malicious code in @umschool/platform (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (bcf64895a777467cc94763bfb942be3c04040ca151fc22753ca48ac4aaecd69c)\n@umschool/platform@999.0.1 is published to public npm under an internal-looking scope with an implausibly high version number, a resolution shape used to override internal builds. Its postinstall.js runs on `npm install` and performs a bulk harvest of installer-owned secrets: it reads the Kubernetes service-account token and namespace from /var/run/secrets/kubernetes.io/serviceaccount/, /etc/hosts and /etc/resolv.conf, queries cloud instance metadata services (AWS IMDS at 169.254.169.254 including IAM role credentials, ECS task-role credentials via 169.254.170.2 / AWS_CONTAINER_CREDENTIALS_RELATIVE_URI, Azure IMDS, and Yandex/GCP-compatible metadata), calls https://kubernetes.default.svc/api/v1/secrets with the harvested SA token as Bearer authorization, walks up to 8 parent directories reading.env files, and filters process.env against a credential regex (token|secret|key|pass|cred|auth|aws|jwt|api|stripe|sendgrid|twilio|...). The collected data is base64-encoded and POSTed to the hardcoded external endpoint https://akko.requestcatcher.com/dep-confusion-v2. The package's self-label as a 'Dependency Confusion PoC' does not change the effect: any build or CI environment that resolves this public package leaks its cloud IAM credentials, Kubernetes secrets, and environment secrets to an external host.\n","modified":"2026-09-09T15:32:41.739025389Z","published":"2026-09-09T14:50:58Z","database_specific":{"malicious-packages-origins":[{"versions":["999.0.2"],"id":"IN-MAL-2026-019857","import_time":"2026-09-09T15:17:29.147897674Z","modified_time":"2026-09-09T14:51:14Z","sha256":"0fefea4d6708fdfc40e784e5906d588dcf2e0cd98cb809de55f22aaf44b31ce9","source":"amazon-inspector"},{"source":"amazon-inspector","versions":["999.0.1"],"id":"IN-MAL-2026-019855","import_time":"2026-09-09T15:17:29.044697464Z","modified_time":"2026-09-09T14:50:58Z","sha256":"bcf64895a777467cc94763bfb942be3c04040ca151fc22753ca48ac4aaecd69c"},{"sha256":"bf32ebb56edccccf87cabc4f5b811872f541fe79659252092d9d19e431152ec2","source":"amazon-inspector","versions":["999.0.0"],"id":"IN-MAL-2026-019856","import_time":"2026-09-09T15:17:29.083930539Z","modified_time":"2026-09-09T14:51:06Z"}]},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@umschool/platform/v/999.0.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@umschool/platform/v/999.0.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@umschool/platform/v/999.0.0"}],"affected":[{"package":{"name":"@umschool/platform","ecosystem":"npm","purl":"pkg:npm/%40umschool/platform"},"versions":["999.0.2","999.0.1","999.0.0"],"database_specific":{"cwes":[{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"}],"indicators":{"evidence_files":[{"sha256":"6338f0bf7620e74ac2955bf281bc99a38b0761a34328ae4f1db3f896cc606371","tlsh":"7da167a420f6942b4eaad565e3affc1a9016f0033881de8cb3fc4e506f8b455a961dd5","path":"postinstall.js"}],"package_integrity":[{"filename":"platform-999.0.2.tgz","hashes":{"sha1":"0bc6394bc2ffc6220938806cfab17d6f3295dcad","sha512_sri":"sha512-8gJ+k6Let+Mz5MAORJgfz6yBxiCo8oClq6SF3NdpIxVHVvaZKOD6TAD857/xbl1U5sAvrYc+GZkYFQIMe/fEZA=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@umschool/platform/MAL-2026-16082.json"}}],"schema_version":"1.9.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}