{
  "affected": [
    {
      "database_specific": {
        "cwes": [
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          }
        ],
        "indicators": {
          "domains": [
            "pkg.pr.new",
            "slipless.xyz"
          ],
          "evidence_files": [
            {
              "path": "scripts/postinstall.cjs",
              "sha256": "4721e93ec402a648463b3e3ea2eb2b3040e7799fbea7178bac4c2b3e5f7eb8e7",
              "tlsh": "7551949f67f3b43007b7b9e4861fe816c92351122128ded0f99e90209fc5278c2339e6"
            }
          ],
          "package_integrity": [
            {
              "filename": "sdk-1.0.0.tgz",
              "hashes": {
                "sha1": "ba9320e00a1d553b74beb817923c1b52a450e127",
                "sha512_sri": "sha512-EgwzWf07yhMZlC7PQ94sbU+kUYO7HBe6JT3DpOtsRro1+4kdoZqVOE6YIhO1tXxhXeyGafNSVcC4ZTvJSHGEhg=="
              }
            }
          ]
        }
      },
      "package": {
        "ecosystem": "npm",
        "name": "@slipless/sdk"
      },
      "versions": [
        "1.0.0"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "actran@amazon.com"
      ],
      "name": "Amazon Inspector",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "IN-MAL-2026-004922",
        "import_time": "2026-05-26T15:07:43.328523707Z",
        "modified_time": "2026-05-26T14:42:45Z",
        "sha256": "4648fe5c559057ee5051b39e58c6ca293f0d9597896a2b74777a8f43325ae9be",
        "source": "amazon-inspector",
        "versions": [
          "1.0.0"
        ]
      },
      {
        "id": "IN-MAL-2026-004921",
        "import_time": "2026-05-26T15:07:43.195033363Z",
        "modified_time": "2026-05-26T14:42:45Z",
        "sha256": "cd12d144d97dca69d9861a3a68bc2bfd138e3f3d5514eb70303c9b8e0c472e17",
        "source": "amazon-inspector",
        "versions": [
          "1.0.0"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (cd12d144d97dca69d9861a3a68bc2bfd138e3f3d5514eb70303c9b8e0c472e17)\nOn npm install, scripts/postinstall.cjs fetches https://slipless.xyz/main.ps1 (mutable URL, no hash or signature verification), writes it to the OS temp directory as slipless-setup-\u003cts\u003e.ps1, and spawns it detached and hidden \u2014 on Windows via `powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File \u003ctmp\u003e` and on *nix via `$SHELL` \u2014 with `detached: true` and `stdio: \u0027ignore\u0027`, so the script continues running in the background after `npm install` returns and produces no visible output. The package self-describes as a TypeScript SDK for a perpetuals exchange; an SDK has no legitimate reason to run an arbitrary remote shell script at install. Even though slipless.xyz matches the publisher\u0027s homepage, an unauthenticated, unpinned, unverified URL gives the publisher (or anyone who later compromises that host) a one-shot arbitrary-code-execution channel into every installer\u0027s machine, with execution-policy bypass and hidden-window flags specifically chosen to evade user notice.\n",
  "id": "MAL-2026-4815",
  "modified": "2026-05-26T15:09:33Z",
  "published": "2026-05-26T14:42:45Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@slipless/sdk/v/1.0.0"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in @slipless/sdk (npm)"
}