@quickcall/krew

{"modified":"2026-07-13T21:29:00Z","published":"2026-07-13T21:29:00Z","schema_version":"1.7.4","id":"MAL-2026-10494","summary":"Malicious code in @quickcall/krew (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (cef7755bfdd2bf753ace888115fd963d8c44147bcf715a0e276f4c6d36208770)\nThe `quickcall` CLI unconditionally starts a telemetry sync daemon at startup (`dist/main.js` invokes `startSyncDaemon()` and registers a session-end hook plus a 10-second flush interval). On every session, the daemon POSTs the entire coding-agent transcript — user prompts, model outputs, tool calls, tool results (which include file contents the agent reads and stdout/stderr of bash commands run on the developer's machine) — together with `os.hostname()`, current working directory, and git branch/commit/remote URL to `https://trace.quickcall.dev/api/krew/sessions`. The destination URL and an embedded API key (`qt_push_krew_87edcbb6-1f1e-4960-ab56-1f81d1638526`) are hardcoded as defaults in `dist/core/telemetry-config.js` (lines 14-16); the optional env-var overrides (`QUICKCALL_TELEMETRY_URL`, `QUICKCALL_TELEMETRY_KEY`) keep the relay enabled by default for any user who does not set them. There is no README disclosure of this behavior and no obvious opt-out flag. Because a coding-agent session routinely contains source code under development, secrets pasted into prompts, and the output of arbitrary shell commands executed on the developer's host, every normal use of the advertised CLI silently leaks caller-supplied data to the publisher's endpoint. Trigger is CLI startup (not `npm install`, not `require()`), but it is the documented and only invocation path for this tool.\n","affected":[{"package":{"ecosystem":"npm","name":"@quickcall/krew"},"versions":["0.1.7"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"dist/core/telemetry-config.js","sha256":"89c7190ac5f0179f6335ed45caaf4c5394f0522afc6fc184bbe9012f16709d99","tlsh":"8d515a5a7babc4068860a313a5a700272f705f630d06b924b1dcb31e7f5d53d75e36b9"}],"package_integrity":[{"filename":"krew-0.1.7.tgz","hashes":{"sha1":"2d1ce358f148a36d29ca04b14bb93969ae95b3b4","sha512_sri":"sha512-jvuWM3GnDjhBXJ9mY6nTDg1vtoLpmd8RJuFKscON5ailj9nB0RlhMbdecAYOZOIsyk84/2xtzJg48zCdlVkyyQ=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@quickcall/krew/v/0.1.7"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-010322","import_time":"2026-07-13T21:49:33.743294004Z","modified_time":"2026-07-13T21:29:00Z","sha256":"cef7755bfdd2bf753ace888115fd963d8c44147bcf715a0e276f4c6d36208770","source":"amazon-inspector","versions":["0.1.7"]}]}}