{"id":"MAL-2026-4485","summary":"Malicious code in atel-mcp-openclaw (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (b1e4255e19fdb4f0352f184f35599be81651badab879e4f39d0f3bb4fda4a58e)\nThe package contains multiple structural fingerprints of an active credential-stealer / C2 implant. bin/install.js performs lifecycle-time HTTP POSTs (lines 245, 534, 688, 924) and fetch calls (line 533), executing network activity during npm install. src/setup.js fetches https://api.ipify.org and reads process.env, capturing the installer's public IP and environment for outbound transmission. src/tg-dispatch.js hard-codes https://api.telegram.org as the command-and-control endpoint, with a Telegram bot POST channel at line 416 and process.env reads at lines 54 and 71 — the canonical Telegram-bot-as-C2 pattern. src/tool.js contains five POST sites (lines 10, 16, 310, 355, 377) and base64 decoding via Buffer.from(..., 'base64'). src/listener.js, src/heartbeat.js, and src/poll-loop.js implement long-running heartbeat / polling / listener loops with additional base64-decoded payloads — the runtime backdoor surface. Combined, the package exhibits at least three independent block fingerprints: install-time outbound network with environment scraping, hardcoded Telegram C2 endpoint, and a persistent polling/heartbeat backdoor with base64-decoded payloads.\n","modified":"2026-05-27T00:32:12.720918231Z","published":"2026-05-25T11:50:05Z","withdrawn":"2026-05-26T18:33:09Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2026-05-25T11:59:09Z","sha256":"095348c1a84e62e3f14c0a883920051853fa0b3ad225680b89f95677d8f0243f","source":"amazon-inspector","versions":["0.6.44"],"id":"IN-MAL-2026-004634","import_time":"2026-05-26T05:52:59.438136346Z"},{"modified_time":"2026-05-25T11:50:05Z","sha256":"b1e4255e19fdb4f0352f184f35599be81651badab879e4f39d0f3bb4fda4a58e","source":"amazon-inspector","versions":["0.6.43"],"id":"IN-MAL-2026-004633","import_time":"2026-05-26T05:52:59.318735902Z"}]},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/atel-mcp-openclaw/v/0.6.44"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/atel-mcp-openclaw/v/0.6.43"}],"affected":[{"package":{"name":"atel-mcp-openclaw","ecosystem":"npm","purl":"pkg:npm/atel-mcp-openclaw"},"versions":["0.6.44","0.6.43"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"bin/install.js","sha256":"a2bb1550b2599d6ad10af2a701fe06f6a0a135912bc89016500d73a662424299","tlsh":"a443191647ba02370ea39356aa4f10767b69d2522309f8a472dd53987f4a43c423b7ff"},{"path":"src/heartbeat.js","sha256":"9c03580913e7b90683f63c018056e937b8fa67c291461824fd22f97f0aa80039","tlsh":"b102a5191df3462189b312529b4b50ba7f1ca603390ee4e973dcd749af9551cc263bec"},{"tlsh":"c4f2d84527f652320aa6a657ab4f5ce2f725f0833e08d464b64dc3e86f8d41c83b46f5","path":"src/listener.js","sha256":"9e86864a06ae1ffca7614bb537b1326ae96e49c3e0e0d918df8ee33d6783f205"},{"sha256":"53d84bd763d20563588bb9ea65ffbb42d2470ebb2aeb82b70b8eeb4dd4d10bef","tlsh":"2f32d7593bf7943204e76157379b6471e23a81072c5de8e876cc83146f9d82cc2b6be8","path":"src/poll-loop.js"},{"path":"src/setup.js","sha256":"4321300785b134fca82b893a2f94de5de7dd4d47e48e30efe1e977c080a8876e","tlsh":"e032a64983f794378eea63a76f4f707572679102110cd9a872ce82e07f074648ab97dd"},{"sha256":"a47109556f8f56a55bc85bb2f59ee96c929ee54af7c5f55439fb408df344d559","tlsh":"e8b2fa9911f361120e6612b55b4fb826be24f4473e0ac8f4ba8fd2589f4b058c1b5efd","path":"src/tg-dispatch.js"},{"tlsh":"efe2191666f211338997d35a9b4b6071b738a1033e49f86076de53182f8d12dc273afe","path":"src/tool.js","sha256":"029c714b91680d5cb0ba3d7f0f183cddf17a14d28c4f71cee77ca8e56ed2b4e9"}],"package_integrity":[{"filename":"atel-mcp-openclaw-0.6.44.tgz","hashes":{"sha512_sri":"sha512-ujJdlaB43WEkL9T5D6cnOHMglXP4gyFMfyM1ERfFFOJCaJ56xStcm0+U6N243xGiXfrRth8TXUsLL90LTDgMqQ==","sha1":"3f436d86675af4a563d04aba6f52b6733c133e64"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/atel-mcp-openclaw/MAL-2026-4485.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"}]}