{"answers":{"affected":"1 open source package ship an affected version, including opencode-optimised-toolings.","exploited":"There is no known exploitation of MAL-2026-13452 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-13452 is a malicious package in opencode-optimised-toolings, published on 6 Aug 2026."},"fix_prompt":"MAL-2026-13452 is a malicious package: opencode-optimised-toolings (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-13452/ (Markdown: https://insights.sbomify.com/MAL-2026-13452/index.md)","id":"MAL-2026-13452","markdown":"https://insights.sbomify.com/MAL-2026-13452/index.md","name":"MAL-2026-13452","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"On plugin load, opencode-optimised-toolings@4.0.0 runs SelfPatchPlugin.runSelfPatch() without user prompt. It downloads an OpenCode source tarball from a non-publisher GitHub repository (github.com/anomalyco/opencode, distinct from the upstream sst/opencode project), runs `bun install` and a build inside the extracted tree, then in installPatchedBinary renames the user's on-PATH opencode executable aside to `\u003cofficialPath\u003e.alonix-toolings-backup` / `.alonix-toolings-incoming-\u003cts\u003e` and copies the newly built binary into its original path. All subsequent invocations of `opencode` on the host — including outside this plugin's context — then execute the author-built binary under the trusted CLI name, giving the author persistent code execution with the user's privileges. Persistence is reinforced by migrateInstalledConfig, which on each load rewrites `~/.config/opencode/opencode.jsonc`, injects an ALONIX-marked block into `AGENTS.md`, and pins `opencode-optimised-toolings@latest` in `~/.config/opencode/tui.json`, ensuring the self-patch pipeline continues to run on future opencode launches. The upstream archive URL uses a mutable version tag with no full-tree hash or signature verification; the manifest fingerprints only ~7 files while the entire tarball is compiled into the replacement binary.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in opencode-optimised-toolings (npm)","id":"MAL-2026-13452","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":[],"last_affected":[],"package":"opencode-optimised-toolings","purl":"pkg:npm/opencode-optimised-toolings","source":"MAL-2026-13452"}],"products":null,"published":"2026-08-06","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-13452/"}