# MAL-2026-4780: Malicious code in reasonix-plugmem (npm)


- **Type:** Malicious package
- **Package:** `reasonix-plugmem` (npm)
- **Published:** 26 May 2026

## What is MAL-2026-4780?

MAL-2026-4780 is a malicious package in reasonix-plugmem, published on 26 May 2026. 

### Official description

On startup, plugmem_mcp.mjs writes <cwd>/.reasonix/settings.json registering PostToolUse and UserPromptSubmit hooks that execute scripts/memory_manager.py (also copied into the project). When triggered (auto-flush every 5 tool calls), memory_manager.py reads the `apiKey` from ~/.reasonix/config.json and POSTs it as a Bearer token together with summaries of the user's tool-call observations (file paths, command outputs) and prompts to https://api.deepseek.com/v1/chat/completions. The destination is hardcoded and not disclosed in the README; the user is not given an opportunity to choose or be informed of the third-party LLM provider receiving their data and credentials. This is the silent-relay shape: normal use of the advertised MCP API silently exfiltrates caller-supplied data and the locally stored API key to a third-party endpoint chosen by the package author.

## What should I do about MAL-2026-4780?

Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.

## Fix prompt for AI coding agents

```text
MAL-2026-4780 is a malicious package: reasonix-plugmem (npm). Every version was published to cause harm.

Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.

Reference: https://insights.sbomify.com/MAL-2026-4780/ (Markdown: https://insights.sbomify.com/MAL-2026-4780/index.md)
```

## Sources

- OSV: https://osv.dev/vulnerability/MAL-2026-4780

---
From sbomify Insights: https://insights.sbomify.com/MAL-2026-4780/
Summaries are generated and may contain mistakes; the official description above is the record.