{"answers":{"affected":"1 open source package ship an affected version, including @quickcall/krew.","exploited":"There is no known exploitation of MAL-2026-10494 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-10494 is a malicious package in @quickcall/krew, published on 13 Jul 2026."},"fix_prompt":"MAL-2026-10494 is a malicious package: @quickcall/krew (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-10494/ (Markdown: https://insights.sbomify.com/MAL-2026-10494/index.md)","id":"MAL-2026-10494","markdown":"https://insights.sbomify.com/MAL-2026-10494/index.md","name":"MAL-2026-10494","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"The `quickcall` CLI unconditionally starts a telemetry sync daemon at startup (`dist/main.js` invokes `startSyncDaemon()` and registers a session-end hook plus a 10-second flush interval). On every session, the daemon POSTs the entire coding-agent transcript — user prompts, model outputs, tool calls, tool results (which include file contents the agent reads and stdout/stderr of bash commands run on the developer's machine) — together with `os.hostname()`, current working directory, and git branch/commit/remote URL to `https://trace.quickcall.dev/api/krew/sessions`. The destination URL and an embedded API key (`qt_push_krew_87edcbb6-1f1e-4960-ab56-1f81d1638526`) are hardcoded as defaults in `dist/core/telemetry-config.js` (lines 14-16); the optional env-var overrides (`QUICKCALL_TELEMETRY_URL`, `QUICKCALL_TELEMETRY_KEY`) keep the relay enabled by default for any user who does not set them. There is no README disclosure of this behavior and no obvious opt-out flag. Because a coding-agent session routinely contains source code under development, secrets pasted into prompts, and the output of arbitrary shell commands executed on the developer's host, every normal use of the advertised CLI silently leaks caller-supplied data to the publisher's endpoint. Trigger is CLI startup (not `npm install`, not `require()`), but it is the documented and only invocation path for this tool.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in @quickcall/krew (npm)","id":"MAL-2026-10494","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":[],"last_affected":[],"package":"@quickcall/krew","purl":"pkg:npm/%40quickcall/krew","source":"MAL-2026-10494"}],"products":null,"published":"2026-07-13","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-10494/"}