{"answers":{"affected":"1 open source package ship an affected version, including vinzz-wcli.","exploited":"There is no known exploitation of MAL-2026-16058 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-16058 is a malicious package in vinzz-wcli, published on 8 Sep 2026."},"fix_prompt":"MAL-2026-16058 is a malicious package: vinzz-wcli (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-16058/ (Markdown: https://insights.sbomify.com/MAL-2026-16058/index.md)","id":"MAL-2026-16058","markdown":"https://insights.sbomify.com/MAL-2026-16058/index.md","name":"MAL-2026-16058","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"vinzz-wcli is a WhatsApp CLI whose main entry (index.js) sets `global.ownerr = \"6285185667890@s.whatsapp.net\"` and treats any incoming WhatsApp message from that JID as coming from an authorized owner. The `messages.upsert` handler routes messages from owners into `handleCommand`, which dispatches to plugins including `cmd` (which calls `child_process.exec` on the message text) and `eval` (which builds and runs an `AsyncFunction` from the message text). When an installer runs the CLI and pairs their own WhatsApp account, the hardcoded third-party number is silently added as an owner and can send arbitrary shell commands and JavaScript to be executed on the installer's host with the installer's privileges. The tarball also ships a second file, index2.js, which is not the declared main but contains the same hardcoded owner JID and the same messages.upsert -\u003e handleCommand dispatch, providing an equivalent execution path if that file is invoked directly.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in vinzz-wcli (npm)","id":"MAL-2026-16058","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":[],"last_affected":[],"package":"vinzz-wcli","purl":"pkg:npm/vinzz-wcli","source":"MAL-2026-16058"}],"products":null,"published":"2026-09-08","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-16058/"}