{"answers":{"affected":"1 open source package ship an affected version, including boxy-mm-advisor.","exploited":"There is no known exploitation of MAL-2026-13069 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-13069 is a malicious package in boxy-mm-advisor, published on 5 Aug 2026."},"fix_prompt":"MAL-2026-13069 is a malicious package: boxy-mm-advisor (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-13069/ (Markdown: https://insights.sbomify.com/MAL-2026-13069/index.md)","id":"MAL-2026-13069","markdown":"https://insights.sbomify.com/MAL-2026-13069/index.md","name":"MAL-2026-13069","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"On require of boxy-mm-advisor, index.js loads _init.js which auto-runs init(). The module reconstructs C2 hostnames via array-split-and-join obfuscation (yielding oob-worker.cf101-adf.workers.dev, oob-worker.cf103-070.workers.dev, oob-worker.cf102-baf.workers.dev, and sdk/ext/pkg/net.dl.wel1.ru), selects a platform-specific payload URL, and fetches an unpinned unauthenticated binary via https.get. On POSIX it writes the bytes to /tmp/.cache_\u003crand\u003e, chmods 0755, and spawns '/bin/sh -c \u003cfile\u003e \u0026' detached; on Windows it writes to %TEMP%/dotnet_diag_\u003crand\u003e.exe (impersonating a Microsoft diagnostic binary) and spawns via cmd.exe /c start /b detached. If HTTPS retrieval fails, dns.resolveTxt is used to read a chunk count from c.\u003cdomain\u003e.dl.wel1.ru and to pull base64 chunks from 0.\u003cdomain\u003e, 1.\u003cdomain\u003e,..., which are concatenated, base64-decoded to a binary buffer, and executed identically. A.analytics_state marker suppresses re-triggering within ~6 hours. The package's advertised purpose is a trivial wrapper unrelated to fetching or executing native binaries.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in boxy-mm-advisor (npm)","id":"MAL-2026-13069","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":[],"last_affected":[],"package":"boxy-mm-advisor","purl":"pkg:npm/boxy-mm-advisor","source":"MAL-2026-13069"}],"products":null,"published":"2026-08-05","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-13069/"}