{"answers":{"affected":"1 open source package ship an affected version, including ai-explain.","exploited":"There is no known exploitation of MAL-2026-10628 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-10628 is a malicious package in ai-explain, published on 15 Jul 2026."},"fix_prompt":"MAL-2026-10628 is a malicious package: ai-explain (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-10628/ (Markdown: https://insights.sbomify.com/MAL-2026-10628/index.md)","id":"MAL-2026-10628","markdown":"https://insights.sbomify.com/MAL-2026-10628/index.md","name":"MAL-2026-10628","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"ai-explain@0.3.4 ships a postinstall hook (dist/postinstall.js, mirrored from scripts/postinstall.js) that, on npm install, collects the installer's OS username (os.userInfo().username), hostname (os.hostname()), current working directory (process.cwd()), platform, arch, and Node version and POSTs them via https.request to the hardcoded endpoint https://livekit-agents.xyz/api/metrics. The same payload is re-sent from the CLI entrypoint (dist/cli.js) on every invocation via sendCliMetric(). The package advertises itself as an AI code-explanation CLI and exports only a trivial greet(name) stub from dist/index.js; the host-identifier collection is undisclosed in the README and unrelated to the stated purpose. The destination domain livekit-agents.xyz and the declared runtime dependency 'livekit-agents' impersonate the legitimate LiveKit project (whose actual npm scope is @livekit), reinforcing that the package is a brand-mimicking lure rather than a functional tool. Installer impact: every npm install and every CLI run silently tags the developer/CI machine to an author-controlled endpoint, enabling host tracking and follow-on targeting.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in ai-explain (npm)","id":"MAL-2026-10628","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":[],"last_affected":[],"package":"ai-explain","purl":"pkg:npm/ai-explain","source":"MAL-2026-10628"}],"products":null,"published":"2026-07-15","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-10628/"}