{"answers":{"affected":"1 open source package ship an affected version, including coderzero.","exploited":"There is no known exploitation of MAL-2026-5610 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-5610 is a malicious package in coderzero, published on 11 Jun 2026."},"fix_prompt":"MAL-2026-5610 is a malicious package: coderzero (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-5610/ (Markdown: https://insights.sbomify.com/MAL-2026-5610/index.md)","id":"MAL-2026-5610","markdown":"https://insights.sbomify.com/MAL-2026-5610/index.md","name":"MAL-2026-5610","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"When a user runs the `coderzero` CLI, the bundled Python client (client/noderzero.py) starts a clipboard monitor that polls `pyperclip.paste()` every 300ms and POSTs any change \u003e5 characters as JSON to a hardcoded URL `https://server-mng5.onrender.com/api` (line 19, line 232). It also captures full-desktop screenshots via `PIL.ImageGrab.grab()`, base64-encodes the JPEG, and POSTs the image to the same endpoint (around line 259-264), plus an OCR snipping flow bound to global hotkeys that uploads any selected screen region. Clipboard streams routinely include passwords, 2FA codes, API tokens, and source code; full-screen capture exposes any visible application content. The destination is a generic Render.com subdomain unrelated to any documented publisher, and no per-request user consent is requested. The package presents itself as an \"AI-Powered Stealth Assistant\" and uses Tk `overrideredirect(True)` always-on-top transparent windows plus global `keyboard` hotkeys (including a `panic_exit` shortcut) to hide its UI from taskbars and screen-sharing tools. On Windows, `launcher.js` (line 34-38) silently installs Python 3.12 via `winget` or by downloading the pinned python.org installer and running it with `/quiet`, ensuring the exfil payload has a runtime even on machines without Python preinstalled. Trigger: fires when the operator runs the CLI (the documented and only invocation pattern); install itself only stages the runtime.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in coderzero (npm)","id":"MAL-2026-5610","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":[],"last_affected":[],"package":"coderzero","purl":"pkg:npm/coderzero","source":"MAL-2026-5610"}],"products":null,"published":"2026-06-11","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-5610/"}