{"id":"MAL-2026-4484","summary":"Malicious code in ask-my-llm (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (9429d8e8e36f3d97c246ce408491ea570ab5d3f5e7cb2481a3c2ea4b7c8477b8)\nindex.js requires child_process and contains hardcoded POST calls to https://cows.info.gf at lines 67 and 100, alongside references to process.env at line 6 and a spawn('curl',...) invocation at line 108. The combination of a hardcoded non-publisher exfiltration endpoint, environment-variable access, and shell-out to curl in the package's main module constitutes an exfiltration / C2 fingerprint with no benign interpretation: a package describing itself as an LLM helper has no legitimate need to POST to a personal.gf domain or shell out to curl for network I/O when a normal HTTP client would suffice. The endpoint cows.info.gf is not associated with any known LLM provider and is structured as an attacker-controlled drop site.\n","modified":"2026-05-27T00:32:12.714757236Z","published":"2026-05-23T09:34:22Z","withdrawn":"2026-05-26T18:32:24Z","database_specific":{"malicious-packages-origins":[{"sha256":"183ee8aeb137f55b3262b9193e2647c6b515664699574db8c800a3bb64775c98","source":"amazon-inspector","versions":["1.1.5"],"id":"IN-MAL-2026-004307","import_time":"2026-05-26T05:52:20.611527481Z","modified_time":"2026-05-23T09:49:18Z"},{"id":"IN-MAL-2026-004306","import_time":"2026-05-26T05:52:20.51406053Z","modified_time":"2026-05-23T09:37:26Z","sha256":"9429d8e8e36f3d97c246ce408491ea570ab5d3f5e7cb2481a3c2ea4b7c8477b8","source":"amazon-inspector","versions":["1.1.4"]},{"id":"IN-MAL-2026-004305","import_time":"2026-05-26T05:52:20.370492417Z","modified_time":"2026-05-23T09:34:22Z","sha256":"f8c55f3e5b658f73805a74a9cc6b7eb47cb2025955e0e7868765f7594c51c8c3","source":"amazon-inspector","versions":["1.1.3"]}]},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/ask-my-llm/v/1.1.5"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/ask-my-llm/v/1.1.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/ask-my-llm/v/1.1.3"}],"affected":[{"package":{"name":"ask-my-llm","ecosystem":"npm","purl":"pkg:npm/ask-my-llm"},"versions":["1.1.5","1.1.4","1.1.3"],"database_specific":{"cwes":[{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"index.js","sha256":"d6ca40a6577eec745bc5820d8dfdd9a6c04c41af495654a789467627ef729622","tlsh":"b481539624ff2e2301a36ba496cf943d2db5b783315de958b1cda3845f88424d1a37d4"}],"package_integrity":[{"filename":"ask-my-llm-1.1.5.tgz","hashes":{"sha512_sri":"sha512-itW5zn4dhYyxpKKTAlfM2O8LNBg3S/uMnDeXHv8yJKYzjCF+YmKz1HUsl5ZLOBQCnnX/oDpEUGOS+1nWqANSXw==","sha1":"01c947fee34ed1924a333a5498fab1b827d3b37c"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/ask-my-llm/MAL-2026-4484.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"}]}