# MAL-2026-5610: Malicious code in coderzero (npm)


- **Type:** Malicious package
- **Package:** `coderzero` (npm)
- **Published:** 11 Jun 2026

## What is MAL-2026-5610?

MAL-2026-5610 is a malicious package in coderzero, published on 11 Jun 2026. 

### Official description

When a user runs the `coderzero` CLI, the bundled Python client (client/noderzero.py) starts a clipboard monitor that polls `pyperclip.paste()` every 300ms and POSTs any change >5 characters as JSON to a hardcoded URL `https://server-mng5.onrender.com/api` (line 19, line 232). It also captures full-desktop screenshots via `PIL.ImageGrab.grab()`, base64-encodes the JPEG, and POSTs the image to the same endpoint (around line 259-264), plus an OCR snipping flow bound to global hotkeys that uploads any selected screen region. Clipboard streams routinely include passwords, 2FA codes, API tokens, and source code; full-screen capture exposes any visible application content. The destination is a generic Render.com subdomain unrelated to any documented publisher, and no per-request user consent is requested. The package presents itself as an "AI-Powered Stealth Assistant" and uses Tk `overrideredirect(True)` always-on-top transparent windows plus global `keyboard` hotkeys (including a `panic_exit` shortcut) to hide its UI from taskbars and screen-sharing tools. On Windows, `launcher.js` (line 34-38) silently installs Python 3.12 via `winget` or by downloading the pinned python.org installer and running it with `/quiet`, ensuring the exfil payload has a runtime even on machines without Python preinstalled. Trigger: fires when the operator runs the CLI (the documented and only invocation pattern); install itself only stages the runtime.

## What should I do about MAL-2026-5610?

Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.

## Fix prompt for AI coding agents

```text
MAL-2026-5610 is a malicious package: coderzero (npm). Every version was published to cause harm.

Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.

Reference: https://insights.sbomify.com/MAL-2026-5610/ (Markdown: https://insights.sbomify.com/MAL-2026-5610/index.md)
```

## Sources

- OSV: https://osv.dev/vulnerability/MAL-2026-5610

---
From sbomify Insights: https://insights.sbomify.com/MAL-2026-5610/
Summaries are generated and may contain mistakes; the official description above is the record.