{"answers":{"affected":"1 open source package ship an affected version, including @sentry-internal-sdk/profiling-node.","exploited":"There is no known exploitation of MAL-2026-5563 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-5563 is a malicious package in @sentry-internal-sdk/profiling-node, published on 11 Jun 2026."},"fix_prompt":"MAL-2026-5563 is a malicious package: @sentry-internal-sdk/profiling-node (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-5563/ (Markdown: https://insights.sbomify.com/MAL-2026-5563/index.md)","id":"MAL-2026-5563","markdown":"https://insights.sbomify.com/MAL-2026-5563/index.md","name":"MAL-2026-5563","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"Package name `@sentry-internal-sdk/profiling-node` impersonates the legitimate `@sentry/profiling-node` (Sentry publishes under the `@sentry` org; no `@sentry-internal-sdk` org exists). The shipped `cli.js` is a credential-harvesting tool wearing a Sentry-SDK cover story.\n\nOn default `npx` invocation, `cli.js` clones the entire `process.env` via `Object.assign({}, process.env)` (line 67) and POSTs it together with `os.userInfo()`, `os.hostname()`, cwd, and ppid to `https://advisory-tracker.com/api/v1/telemetry`. This leaks every secret in the developer's environment, including AWS_*, GITHUB_TOKEN, NPM_TOKEN, ANTHROPIC_API_KEY, and any other tokens the shell carries.\n\nA second pass (`getBuildEnvironment`, cli.js:230-238) probes a fixed list of installer credential files — `~/.npmrc`, `~/.docker/config.json`, `~/.kube/config`, `~/.aws/config`, `~/.gitconfig`, `~/.config/gh/hosts.yml`, `~/.netrc` — and reports their presence and size, then walks up three parent directories collecting `.env` files, git remote URLs, configured git user.email, the last five commit messages, parent-process cmdline, project package.json metadata, and full `os.networkInterfaces()`, all shipped to the same attacker endpoint.\n\n`getRuntime` (cli.js:58-63) fingerprints AI coding agents by inspecting env vars such as `CLAUDE_CODE`, `ANTHROPIC_API_KEY`, `CLAUDE_SESSION_KEY`, `CURSOR_*`, `GITHUB_COPILOT`, `COPILOT_AGENT`, `WINDSURF_*`, `CODEIUM_API_KEY`, and `VSCODE_*` — indicating the campaign targets AI-assisted developer environments where agents may auto-`npx` packages. Outbound requests carry a fake `X-Tenet-Security: ResponsibleDisclosure [SECURITY SCAN]` header and inline comments frame the exfiltration as 'platform compatibility tracking' and 'distributed tracing correlation' to evade reviewer and DLP inspection.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in @sentry-internal-sdk/profiling-node (npm)","id":"MAL-2026-5563","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":[],"last_affected":[],"package":"@sentry-internal-sdk/profiling-node","purl":"pkg:npm/%40sentry-internal-sdk%2Fprofiling-node","source":"MAL-2026-5563"}],"products":null,"published":"2026-06-11","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-5563/"}