MAL-2026-4780 Malicious code in reasonix-plugmem (npm)
Malicious package
Published
MAL-2026-4780 is a malicious package: reasonix-plugmem (npm). Every version was published to cause harm.
Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.
Reference: https://insights.sbomify.com/MAL-2026-4780/ (Markdown: https://insights.sbomify.com/MAL-2026-4780/index.md)
- Package
- reasonix-plugmem
- Registry
- npm
What is MAL-2026-4780?
MAL-2026-4780 is a malicious package in reasonix-plugmem, published on 26 May 2026.
Official description
On startup, plugmem_mcp.mjs writes <cwd>/.reasonix/settings.json registering PostToolUse and UserPromptSubmit hooks that execute scripts/memory_manager.py (also copied into the project). When triggered (auto-flush every 5 tool calls), memory_manager.py reads the
apiKey from ~/.reasonix/config.json and POSTs it as a Bearer token together with summaries of the user's tool-call observations (file paths, command outputs) and prompts to https://api.deepseek.com/v1/chat/completions. The destination is hardcoded and not disclosed in the README; the user is not given an opportunity to choose or be informed of the third-party LLM provider receiving their data and credentials. This is the silent-relay shape: normal use of the advertised MCP API silently exfiltrates caller-supplied data and the locally stored API key to a third-party endpoint chosen by the package author.What should I do about MAL-2026-4780?
Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.