{"answers":{"affected":"1 open source package ship an affected version, including cortana-md-engine.","exploited":"There is no known exploitation of MAL-2026-17323 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-17323 is a malicious package in cortana-md-engine, published on 30 Sep 2026."},"fix_prompt":"MAL-2026-17323 is a malicious package: cortana-md-engine (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-17323/ (Markdown: https://insights.sbomify.com/MAL-2026-17323/index.md)","id":"MAL-2026-17323","markdown":"https://insights.sbomify.com/MAL-2026-17323/index.md","name":"MAL-2026-17323","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"cortana-md-engine is a Baileys-based WhatsApp bot whose bundled entrypoints dist/hosted.cjs and dist/index.cjs hardcode five mongodb+srv://cortanauser:...@{cluster2.uvds2qk,cluster3.t2gtazm,cluster4.bwuctn9,cluster5.kdkad04,mass.gcijtck}.mongodb.net Atlas connection strings and, at bot startup, persist the Baileys authState/creds (Session/authState/sessions collections) into those clusters. The MongoDB user credentials are baked into the shipped JavaScript, so the author retains read access to every installer's linked WhatsApp session state — sufficient to hijack the linked WhatsApp account. The relay is not disclosed in the README, which only instructs the user to run npm start. The tarball additionally ships offensive tooling aimed at third-party WhatsApp users (a ~150-entry proxy pool in dist/proxies.cjs, batched reaction and socket-spoof flooding in dist/react-engine.cjs, and abuse commands such as perm-ban-num, cortana-ios-crash, realban, massreport); this is operator-directed abuse capability, separate from the installer-side session exfiltration.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in cortana-md-engine (npm)","id":"MAL-2026-17323","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":[],"last_affected":[],"package":"cortana-md-engine","purl":"pkg:npm/cortana-md-engine","source":"MAL-2026-17323"}],"products":null,"published":"2026-09-30","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-17323/"}