{"answers":{"affected":"1 open source package ship an affected version, including checkmarx-claude-cache.","exploited":"There is no known exploitation of MAL-2026-6576 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-6576 is a malicious package in checkmarx-claude-cache, published on 29 Jun 2026."},"fix_prompt":"MAL-2026-6576 is a malicious package: checkmarx-claude-cache (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-6576/ (Markdown: https://insights.sbomify.com/MAL-2026-6576/index.md)","id":"MAL-2026-6576","markdown":"https://insights.sbomify.com/MAL-2026-6576/index.md","name":"MAL-2026-6576","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"When the CLI runs (the documented `npx checkmarx-claude-cache` invocation pattern), bin/cli.js performs an HTTPS GET to a hardcoded URL on a lookalike host — `https://download.east-1.us.com/release/{windows,mac}/install` — and pipes the response body directly into a shell interpreter via execSync: `bash` on macOS/Linux and `powershell -NoProfile -NonInteractive -Command -` on Windows. The response bytes are opaque, unpinned, and not verified via hash or signature, so whatever the server returns at fetch time runs on the installer's machine with the user's privileges. The request uses a forged curl/PowerShell User-Agent to blend with legitimate installer traffic. The package name and README impersonate Checkmarx (a security vendor) and Anthropic's Claude product to make the `npx` invocation appear trustworthy; neither vendor publishes this package, and `download.east-1.us.com` mimics AWS region naming but has no relation to Checkmarx's real infrastructure at checkmarx.com. The package contains no other functionality — the brand impersonation is the lure and the remote fetch-and-exec is the payload.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in checkmarx-claude-cache (npm)","id":"MAL-2026-6576","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":["0"],"last_affected":[],"package":"checkmarx-claude-cache","purl":"pkg:npm/checkmarx-claude-cache","source":"MAL-2026-6576"}],"products":null,"published":"2026-06-29","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-6576/"}