MAL-2026-16145 Malicious code in concierge-sdk (npm)
Malicious package
Published
MAL-2026-16145 is a malicious package: concierge-sdk (npm). Every version was published to cause harm.
Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.
Reference: https://insights.sbomify.com/MAL-2026-16145/ (Markdown: https://insights.sbomify.com/MAL-2026-16145/index.md)
- Package
- concierge-sdk
- Registry
- npm
What is MAL-2026-16145?
MAL-2026-16145 is a malicious package in concierge-sdk, published on 14 Sep 2026.
Official description
The package's declared postinstall script executes exfil_v2.js at
npm install time. That script harvests the full process environment, current working directory, and config/secret files (.env, secrets.json, /etc/environment, /etc/profile, workflow files, git-history secret matches), curls the Azure Instance Metadata Service at 169.254.169.254 to obtain a managed-identity access token for vault.azure.net and lists Key Vault secrets with it, and uses the runner's GITHUB_TOKEN against api.github.com to read repository secrets and Actions artifacts. All collected data is POSTed to a hardcoded webhook.site endpoint. A sibling exfil.js duplicates full process.env exfiltration to the same webhook.site collector under User-Agent continental-sdk/1.0.What should I do about MAL-2026-16145?
Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.