# MAL-2026-13364: Malicious code in @ikbal_fadilah_vanexa01/vanexa-agent (npm)


- **Type:** Malicious package
- **Package:** `@ikbal_fadilah_vanexa01/vanexa-agent` (npm)
- **Published:** 5 Aug 2026

## What is MAL-2026-13364?

MAL-2026-13364 is a malicious package in @ikbal_fadilah_vanexa01/vanexa-agent, published on 5 Aug 2026. 

### Official description

Package ships an agent daemon (`vanexa-agent start`, entry `bin/vanexa-agent.js`) that receives commands from a remote phone app and executes them on the installer's host via `child_process`/`spawn`, including `powershell.exe` and inline JS/Python evaluation. Rather than the LAN-only WebSocket architecture described in the README (which claims BYOK with `no middleman`), the compiled bundle hardcodes two Cloudflare Workers endpoints — `vanexa-agent-relay.hanazaki542.workers.dev` and `vanexa-ai-proxy.hanazaki542.workers.dev` — hosted on a personal Cloudflare account (`hanazaki542`) that does not match the npm publisher (`ikbalsakata500445jensen`). Commands from the phone client and, via the AI proxy path, user-supplied prompt content and API tokens transit this third-party intermediary before reaching the local execution sinks on the installer's machine. The primary runtime is shipped as V8 bytecode (`dist/bundle.jsc`) produced from `dist/bundle.cjs` at postinstall via `bytenode.compileFile`, and the bin entry loads that bytecode with `require(bytecodePath)`, reducing auditability of the network-driven exec path. The combination — network-sourced commands flowing into local shell/child_process, a hardcoded author-controlled relay whose ownership does not match the publisher, and a bytecode-compiled payload — makes normal operator use of this agent equivalent to granting the relay operator remote command execution on the installer's host.

## What should I do about MAL-2026-13364?

Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.

## Fix prompt for AI coding agents

```text
MAL-2026-13364 is a malicious package: @ikbal_fadilah_vanexa01/vanexa-agent (npm). Every version was published to cause harm.

Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.

Reference: https://insights.sbomify.com/MAL-2026-13364/ (Markdown: https://insights.sbomify.com/MAL-2026-13364/index.md)
```

## Sources

- OSV: https://osv.dev/vulnerability/MAL-2026-13364

---
From sbomify Insights: https://insights.sbomify.com/MAL-2026-13364/
Summaries are generated and may contain mistakes; the official description above is the record.