{
  "affected": [
    {
      "database_specific": {
        "cwes": [
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          }
        ],
        "indicators": {
          "evidence_files": [
            {
              "path": "index.js",
              "sha256": "8f3a4845c967946366390aa717796f655eed96b06eb2e10dd18d72d8b499f656",
              "tlsh": "7bf0abd6d2f9f5543133a4c9d61e0004a2a2f0c02385cec046afe1f66db2b182706ef8"
            },
            {
              "path": "package.json",
              "sha256": "f5e8622aaf5eb7f4dce5399ed51b820ec9c45cd5f129b497dfc26bcb6bb9c737",
              "tlsh": "afc08c200900f13318c6ce710db2ce2906695c2f6390f5080b2b2014c1aabf3a4f6b8c"
            }
          ],
          "package_integrity": [
            {
              "filename": "sdk-1.0.2.tgz",
              "hashes": {
                "sha1": "446f68145088f7774773b7d85320dcdffb82adbc",
                "sha512_sri": "sha512-rNniRCuSzX7NAElbcD6Nik4WjU+f3EIPIBtXLh1+MFFjaWbBkDv3oNWSoVnrkgCw3CmCJDKJsAplFJNxuT913A=="
              }
            }
          ]
        }
      },
      "package": {
        "ecosystem": "npm",
        "name": "@onum-releases/sdk"
      },
      "versions": [
        "1.0.2",
        "1.0.1",
        "1.0.3"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "inspector-research@amazon.com"
      ],
      "name": "Amazon Inspector",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "IN-MAL-2026-006993",
        "import_time": "2026-06-18T17:08:46.845053784Z",
        "modified_time": "2026-06-18T16:15:21Z",
        "sha256": "b70360f3abcea9176799bb327a3470296ba1dd07b81463b28981d5c2fbfa560e",
        "source": "amazon-inspector",
        "versions": [
          "1.0.2"
        ]
      },
      {
        "id": "IN-MAL-2026-006997",
        "import_time": "2026-06-18T17:08:47.097072982Z",
        "modified_time": "2026-06-18T16:15:24Z",
        "sha256": "cae207a349e4bda9359f4981d60ec81d9492cd8624535ee01b44c8f3bf3b3208",
        "source": "amazon-inspector",
        "versions": [
          "1.0.1"
        ]
      },
      {
        "id": "IN-MAL-2026-006996",
        "import_time": "2026-06-18T17:08:47.014691368Z",
        "modified_time": "2026-06-18T16:15:23Z",
        "sha256": "d195016c054f564e0e341fbd97df3950a6c3e289339c9d701e434310b209647b",
        "source": "amazon-inspector",
        "versions": [
          "1.0.3"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (cae207a349e4bda9359f4981d60ec81d9492cd8624535ee01b44c8f3bf3b3208)\nOn import, index.js reads the installer\u0027s machine hostname via os.hostname(), embeds it as a subdomain of a hardcoded *.oastify.com (Burp Collaborator out-of-band callback) host, and issues an HTTPS GET to that host. Specifically, index.js lines 5-7 build `sdk.\u003chostname\u003e.200majoeu01dk02xnjdajro1isojc90y.oastify.com` and call `https.get({ host: host, path: \u0027/sdk\u0027,... })`. The fetch fires unconditionally on `require(\u0027@onum-releases/sdk\u0027)` with no caller consent, leaking the installer\u0027s hostname (via both DNS and HTTPS) to whoever controls that Collaborator instance. The package\u0027s own description says \u0027Security PoC placeholder - benign, no runtime payload\u0027, but the shipped code does run an import-time beacon. The `@onum-releases` scope plus PoC framing is consistent with a dependency-confusion probe against an internal `onum` namespace; the harm to any installer who pulls it (intentionally or via name confusion) is host-identifier exfiltration to a third-party OAST server.\n",
  "id": "MAL-2026-6125",
  "modified": "2026-06-18T17:10:53Z",
  "published": "2026-06-18T16:15:21Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@onum-releases/sdk/v/1.0.2"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@onum-releases/sdk/v/1.0.1"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@onum-releases/sdk/v/1.0.3"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in @onum-releases/sdk (npm)"
}