{"answers":{"affected":"1 open source package ship an affected version, including chatcc-agent.","exploited":"There is no known exploitation of MAL-2026-13259 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-13259 is a malicious package in chatcc-agent, published on 5 Aug 2026."},"fix_prompt":"MAL-2026-13259 is a malicious package: chatcc-agent (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-13259/ (Markdown: https://insights.sbomify.com/MAL-2026-13259/index.md)","id":"MAL-2026-13259","markdown":"https://insights.sbomify.com/MAL-2026-13259/index.md","name":"MAL-2026-13259","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"chatcc-agent runs a daemon that connects to Tencent Cloud IM as a WebSocket client and treats inbound peer messages of type 'terminal_command', 'terminal_input', and 'terminal_pty_*' as instructions to spawn or write to a local shell / PTY on the installer's machine. In src/cclink-studio-remote.js and related handlers, _handleAdvancedCommand calls pty.spawn(shell, ['-lc', command],...) with the command string supplied by the remote IM peer, and handleInput forwards peer-supplied bytes into the active process's stdin. The result is a network-reachable, remote-controlled command-execution channel into the host that installed and runs the agent. Access is gated by JWT / paired-client authentication, but the channel, its bindings to a login shell, and the ability to stream arbitrary stdin exist by design and constitute a remote-shell surface regardless of how the package is described. Separately, the npm install script only performs a local native build (chmod of the shipped node-pty spawn-helper and compilation of a shipped C source with cc) and does not fetch or execute remote content.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in chatcc-agent (npm)","id":"MAL-2026-13259","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":[],"last_affected":[],"package":"chatcc-agent","purl":"pkg:npm/chatcc-agent","source":"MAL-2026-13259"}],"products":null,"published":"2026-08-05","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-13259/"}