{
  "affected": [
    {
      "database_specific": {
        "cwes": [
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          }
        ],
        "indicators": {
          "evidence_files": [
            {
              "path": "src/implant/implant.js",
              "sha256": "f43c7c2eb90ce5ce4e1985e940b8da0dede7eda683f1d4f83237e37e0bfe4b65",
              "tlsh": "ec82958a7efb64344162f16216270019faaad0271709cdf47eac5794ff6433481feae9"
            },
            {
              "path": "src/implant/stealers/clipboard.js",
              "sha256": "eb13c4e8c61c4a10dd91b589ef65714751556a5e02224e279b04e467f28869e1",
              "tlsh": "146177c28ffbf4b08aa2dcb54803085ae97510724556da95765e449cef0fa3091fcf89"
            },
            {
              "path": "src/protocol.js",
              "sha256": "181d064b60d4607595b474417dbb0c22c964543148b506f58bbfec628e7c0ff5",
              "tlsh": "0512e7683ce5642401a2e8d956bb909bf61260033415e1b0ff4d4790afee93ca23fadd"
            }
          ],
          "package_integrity": [
            {
              "filename": "wormgpt-cli-1.0.0.tgz",
              "hashes": {
                "sha1": "6bc93888985a9068663ec6537ca17097324ab5a2",
                "sha512_sri": "sha512-c4t07L2va7I5gSiRHAbCzZEVRW9a3YRYDKdqHmKWHXTckdHXle/qkDUNKDeU32Jyf1G+pnu8CYtt2tRQshvvaQ=="
              }
            }
          ]
        }
      },
      "package": {
        "ecosystem": "npm",
        "name": "wormgpt-cli"
      },
      "versions": [
        "1.0.0",
        "1.0.3",
        "1.0.8",
        "1.0.4",
        "1.0.7",
        "1.0.2",
        "1.0.5",
        "1.0.1",
        "1.0.6"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "inspector-research@amazon.com"
      ],
      "name": "Amazon Inspector",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "IN-MAL-2026-016743",
        "import_time": "2026-08-06T23:25:07.052435408Z",
        "modified_time": "2026-08-06T19:10:40Z",
        "sha256": "6f76eeb5f3df3c8ebc673a73d88aeb6dd0eb89b2b350a36023e2fe2a42eb8ed1",
        "source": "amazon-inspector",
        "versions": [
          "1.0.0"
        ]
      },
      {
        "id": "IN-MAL-2026-016865",
        "import_time": "2026-08-07T00:59:23.177679581Z",
        "modified_time": "2026-08-06T23:59:48Z",
        "sha256": "c19fcfc558eeb517443b7175909cc46461cde81d1b21fb85453599ad152a0ea5",
        "source": "amazon-inspector",
        "versions": [
          "1.0.3"
        ]
      },
      {
        "id": "IN-MAL-2026-016861",
        "import_time": "2026-08-07T00:59:22.795470011Z",
        "modified_time": "2026-08-06T23:59:17Z",
        "sha256": "eebdb11a91bed2a4772d539dc747d9e3ebbf691dda914003b5f8489f0adeeb8c",
        "source": "amazon-inspector",
        "versions": [
          "1.0.8"
        ]
      },
      {
        "id": "IN-MAL-2026-016866",
        "import_time": "2026-08-07T00:59:23.278554169Z",
        "modified_time": "2026-08-06T23:59:56Z",
        "sha256": "f5b2b75cd854946d520e769fef83618dd912cde948ea954a51eb716661302702",
        "source": "amazon-inspector",
        "versions": [
          "1.0.4"
        ]
      },
      {
        "id": "IN-MAL-2026-016863",
        "import_time": "2026-08-07T00:59:22.99668467Z",
        "modified_time": "2026-08-06T23:59:33Z",
        "sha256": "1e2405ae20c3c88dd3adeaa11ed725879aad3625226f4a252748daca8f0874a5",
        "source": "amazon-inspector",
        "versions": [
          "1.0.7"
        ]
      },
      {
        "id": "IN-MAL-2026-016867",
        "import_time": "2026-08-07T00:59:23.381754662Z",
        "modified_time": "2026-08-07T00:00:04Z",
        "sha256": "534ea1156519b64249657c1495faacdb3cc5d8e250a00e0dc2f8fd4e991af61c",
        "source": "amazon-inspector",
        "versions": [
          "1.0.2"
        ]
      },
      {
        "id": "IN-MAL-2026-016864",
        "import_time": "2026-08-07T00:59:23.083960016Z",
        "modified_time": "2026-08-06T23:59:41Z",
        "sha256": "56bfdc165a63f6eecd4e33262562a3b65da59da549298568c42e6b1e530f8860",
        "source": "amazon-inspector",
        "versions": [
          "1.0.5"
        ]
      },
      {
        "id": "IN-MAL-2026-016868",
        "import_time": "2026-08-07T00:59:23.467747845Z",
        "modified_time": "2026-08-07T00:00:13Z",
        "sha256": "8b03000b5f21aa6e61de1a5bf5149d0059372d0663ffda561d2ea8df59062630",
        "source": "amazon-inspector",
        "versions": [
          "1.0.1"
        ]
      },
      {
        "id": "IN-MAL-2026-016862",
        "import_time": "2026-08-07T00:59:22.902902659Z",
        "modified_time": "2026-08-06T23:59:25Z",
        "sha256": "a0ae945d716ee5032c1527fc139d67cd5dee3b155030441574fac459c27a14a6",
        "source": "amazon-inspector",
        "versions": [
          "1.0.6"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (534ea1156519b64249657c1495faacdb3cc5d8e250a00e0dc2f8fd4e991af61c)\nThe package\u0027s bin entries (`wormgpt-cli`, `wormgpt`, `deepholegpt`, `wgpt`) map to `bin/victim.js`, which silently spawns a detached implant on any invocation (including `--help`/`--version`). The implant connects to a hardcoded C2 at http://13.60.13.215:7771 over an AES-256-GCM/HMAC-signed protocol with pool failover and a DNS TXT dead-drop channel (`protocol.js` `pollDnsDeaddrop`) that rotates the C2 URL and shared secret at runtime. On beacon, `implant.js` `gatherInfo()` collects hostname, user, OS, architecture, PID, cwd, home, LAN IP, admin flag, and a persistent victim_id, and accepts opcodes for shell/PowerShell execution, interactive PTY reverse shell, file up/download, keylogging (`GetAsyncKeyState` PowerShell loop), clipboard capture, screenshots, LAN lateral-movement scanning, privilege-escalation checks, and anti-forensics wipe. `stealers/browser.js` reads Chrome/Edge/Brave/Opera/Vivaldi Login Data SQLite databases, decrypts DPAPI-protected passwords via PowerShell with an AMSI bypass stub (`AMSI_BYPASS_B64` base64 blob run through `powershell -EncodedCommand`), parses Firefox `logins.json`, and regex-scans Discord/Chrome LevelDB for auth tokens (`/[\\w-]{24}\\.[\\w-]{6}\\.[\\w-]{27}|mfa\\.[\\w-]{84}/g`), exfiltrating results via C2 opcode OP_BROWSER_DATA. `persist.js` installs persistence across six autostart layers per OS: Windows HKCU/HKLM Run keys, Startup.lnk, WMI __EventFilter/CommandLineEventConsumer permanent subscription, scheduled tasks, and hidden `Windows Helper` directories via `attrib +H +S`; Linux XDG autostart, systemd --user units, `@reboot` crontab, shell RC injection (`.bashrc`/`.zshrc`/`.profile`/`.xinitrc`), and `/etc/rc.local`; macOS LaunchAgent plist with KeepAlive and Login Items via osascript. `loader.js` runs a watchdog sibling process (poll every 20s, `MAX_REVIVES = 50`) plus `uncaughtException` respawn to keep the implant alive.\n",
  "id": "MAL-2026-13466",
  "modified": "2026-08-07T01:01:14.391652127Z",
  "published": "2026-08-06T19:10:40Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/wormgpt-cli/v/1.0.0"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/wormgpt-cli/v/1.0.3"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/wormgpt-cli/v/1.0.8"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/wormgpt-cli/v/1.0.4"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/wormgpt-cli/v/1.0.7"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/wormgpt-cli/v/1.0.2"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/wormgpt-cli/v/1.0.5"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/wormgpt-cli/v/1.0.1"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/wormgpt-cli/v/1.0.6"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in wormgpt-cli (npm)"
}