{"id":"MAL-2026-4568","summary":"Malicious code in fulcrum-sessions (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (f3971399e0fb1bd6c61f5306557512ed22dc0605747526b600b08626a50eb31e)\nsrc/config.js hardcodes a live Telegram bot token (bot id 8656735452) and a default groupId (-1003974755050) pointing at a chat owned by the package author. getConfig() falls back to these defaults when the installer has not set TELEGRAM_BOT_TOKEN or edited ~/.fulcrum-sessions/config.json. The package's purpose is to bridge a Claude Code session to Telegram, so following the README quick-start (`npm install -g fulcrum-sessions && fulcrum-sessions setup && fulcrum-sessions start`) without first overriding the defaults causes every session message, voice transcript, photo, and document handled by the proxy to be polled from and POSTed to api.telegram.org as the author's bot — landing the installer's Claude Code conversation contents in the author's Telegram group. Nothing in the code enforces configuration before the daemon begins polling/sending. Additionally, the embedded bot token is a live third-party credential distributed to every installer, allowing anyone who reads the tarball to act as that bot against Telegram (read group updates, send messages). A separately-shipped Unsplash access key is author-self-harm only and not a basis for the verdict.\n","modified":"2026-05-26T06:02:34.371315386Z","published":"2026-05-20T04:18:24Z","database_specific":{"malicious-packages-origins":[{"modified_time":"2026-05-20T04:48:32Z","sha256":"ac82cf36a305545f8a74253f02cf75a7916409575e42abf67ba42d8ef1f26c58","source":"amazon-inspector","versions":["1.0.1"],"id":"IN-MAL-2026-003464","import_time":"2026-05-26T05:50:41.553519853Z"},{"import_time":"2026-05-26T05:50:41.113364653Z","modified_time":"2026-05-20T04:18:24Z","sha256":"f3971399e0fb1bd6c61f5306557512ed22dc0605747526b600b08626a50eb31e","source":"amazon-inspector","versions":["1.1.0"],"id":"IN-MAL-2026-003460"}]},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/fulcrum-sessions/v/1.0.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/fulcrum-sessions/v/1.1.0"}],"affected":[{"package":{"name":"fulcrum-sessions","ecosystem":"npm","purl":"pkg:npm/fulcrum-sessions"},"versions":["1.0.1","1.1.0"],"database_specific":{"indicators":{"evidence_files":[{"sha256":"ad79472bccf32956baa8b6833de6371f13817d23a66bf2d87385c0370b180fcf","tlsh":"a451ecab3ef55b6487a2d15cc69fc105b1a2f44b7a08f920f4aa5be43f3d82952360c4","path":"src/config.js"}],"package_integrity":[{"filename":"fulcrum-sessions-1.0.1.tgz","hashes":{"sha512_sri":"sha512-xL2sknAnoGsiJVnEPXHE4DYdtnNuyCwSIctM9dWbU75CL0XcE2FfSvgQOGvxLiLAG3OEx5o3SdNXBggXhckINQ==","sha1":"0b3d2de1fd65a47d7fcb16cb03066bd64a64373c"}}]},"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/fulcrum-sessions/MAL-2026-4568.json"}}],"schema_version":"1.7.5","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"}]}