@agent-link/agent

{"schema_version":"1.7.4","id":"MAL-2026-10705","published":"2026-07-16T18:41:12Z","modified":"2026-08-06T14:21:50.630134218Z","summary":"Malicious code in @agent-link/agent (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a7018626958a160ab35a17b31ddd130ba9b6046b870f115b0fa83622b66bd912)\nThe package's runtime connects to a hardcoded WebSocket relay (default wss://msclaude.ai) and dispatches messages received from that relay directly into a locally spawned PTY. terminal.js spawns the user's default shell (or powershell.exe on Windows) via node-pty and exposes a write() method that pipes network-received bytes straight into the shell (`ptyProcess?.write(data)`); connection.js routes `terminal_open` / `terminal_input` events from the WebSocket's `on('message')` handler to that PTY. This grants whoever controls the relay endpoint, or anyone holding a session URL, interactive command execution on the host running the agent, including via a `ping`/`GET`/`POST`/`http.request` command path in dist/local-control-client.js, dist/local-control-http.js, dist/tunnel.js, dist/upgrade-operations.js, and worker/worker.cjs. Publisher provenance for the relay is unclear: package.json homepage points at github.com/yilee/agentlink, the README's Related link points at a different GitHub owner (kailunshi_microsoft/AgenticWorker), and the branding plus hardcoded relay domain is msclaude.ai, which is not tied to a verifiable publisher identity. In addition, emergency-upgrade.js fetches a release manifest from https://msclaude.ai/files/agent/latest.json (and beta.json) and downloads a replacement tarball from the same origin, verifying only hash/size/name against a manifest served by that same origin — so control of msclaude.ai also grants signed-by-manifest package replacement.\n","affected":[{"package":{"name":"@agent-link/agent","ecosystem":"npm"},"versions":["0.1.269","0.1.325","0.1.319","0.1.285","0.1.280","0.1.272","0.1.310","0.1.293","0.1.283","0.1.299","0.1.279","0.1.308","0.1.294","0.1.281","0.1.287","0.1.320","0.1.323","0.1.270","0.1.303","0.1.316","0.1.322","0.1.277","0.1.278","0.1.284","0.1.311","0.1.296","0.1.324","0.1.275","0.1.318","0.1.274","0.1.312","0.1.298","0.1.302","0.1.292","0.1.282","0.1.304","0.1.314","0.1.273","0.1.271","0.1.289","0.1.307"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"dist/terminal.js","sha256":"fd7e7a2a092d230d0c94be7c634c15a5dc492705b9dff4b8c1d1d559a9cd4fe5","tlsh":"139121a95dff193446b73439624f210fa971d0232309cd21ba5d8f625fd627c61d07ae"}],"package_integrity":[{"filename":"agent-0.1.269.tgz","hashes":{"sha1":"a78cdac8b0c5891e32cb2a38903103de1b705d0d","sha512_sri":"sha512-8iSt8k2xJB04+OAF2O0s9MfrWLcOfhmjGI0uYnMX4Q6qO8FsZ8jPM87GD9s88DiQZeYNPwPa5uSBGfPDGqrfuA=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.269"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.325"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.319"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.285"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.280"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.272"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.310"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.293"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.283"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.299"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.279"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.308"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.294"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.281"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.287"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.320"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.323"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.270"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.303"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.316"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.322"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.277"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.278"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.284"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.311"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.296"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.324"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.275"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.318"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.274"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.312"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.298"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.302"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.292"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.282"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.304"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.314"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.273"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.271"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.289"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@agent-link/agent/v/0.1.307"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-010745","import_time":"2026-07-16T18:54:02.371271035Z","modified_time":"2026-07-16T18:41:12Z","sha256":"b3a178213d6597e731a313e9ec92f5b2afb8b955e3205500fa67ff6dc1ca989c","source":"amazon-inspector","versions":["0.1.269"]},{"id":"IN-MAL-2026-016050","import_time":"2026-08-06T13:08:42.374770949Z","modified_time":"2026-08-06T12:24:19Z","sha256":"d482435ee79a0a7d632e1059787cde8173eab9c01ce75854e786a4da31d125db","source":"amazon-inspector","versions":["0.1.325"]},{"id":"IN-MAL-2026-016431","import_time":"2026-08-06T14:19:48.798363974Z","modified_time":"2026-08-06T13:28:10Z","sha256":"4278037c2425e8f4a45b96bdf5dc9f4fb18a8fa705d52600d313da4c30b4b1cc","source":"amazon-inspector","versions":["0.1.319"]},{"id":"IN-MAL-2026-016426","import_time":"2026-08-06T14:19:48.576629261Z","modified_time":"2026-08-06T13:27:24Z","sha256":"8f58784e1cea34de7ee3fc4f8489e32931659524b24c64051783210f0cd4cade","source":"amazon-inspector","versions":["0.1.285"]},{"id":"IN-MAL-2026-016443","import_time":"2026-08-06T14:19:49.668190883Z","modified_time":"2026-08-06T13:30:06Z","sha256":"947b4ed25a2191b8b712002a627f9573695fad823d760c3812f2459958ed13fc","source":"amazon-inspector","versions":["0.1.280"]},{"id":"IN-MAL-2026-016446","import_time":"2026-08-06T14:19:49.805778633Z","modified_time":"2026-08-06T13:30:33Z","sha256":"bb903bf72dbf94360d4b59f147bd7eaa8ade44f249c472334dd87d16558db5fc","source":"amazon-inspector","versions":["0.1.272"]},{"id":"IN-MAL-2026-016411","import_time":"2026-08-06T14:19:47.705683492Z","modified_time":"2026-08-06T13:25:01Z","sha256":"cfe1b0819afde0fd8ed370cc911ecb60f7e8de1d277cba4c4f40dc4da2b0e66d","source":"amazon-inspector","versions":["0.1.310"]},{"id":"IN-MAL-2026-016439","import_time":"2026-08-06T14:19:49.181439291Z","modified_time":"2026-08-06T13:29:24Z","sha256":"23b248d2d132e1a620eadaab2ef2d74f0bdf3920e679c40fcba55c18fb67d80c","source":"amazon-inspector","versions":["0.1.293"]},{"id":"IN-MAL-2026-016440","import_time":"2026-08-06T14:19:49.218237574Z","modified_time":"2026-08-06T13:29:37Z","sha256":"33a35f5fa1e44dfcc26236fe2a10d7d3fe3c62a079dad7d1880f60a0e4f5a5bc","source":"amazon-inspector","versions":["0.1.283"]},{"id":"IN-MAL-2026-016422","import_time":"2026-08-06T14:19:48.364007925Z","modified_time":"2026-08-06T13:26:50Z","sha256":"4bcbde2d0f6c5a4b81a86c25475d7e4a460887d9ba60c11b433e13a04d322f2a","source":"amazon-inspector","versions":["0.1.299"]},{"id":"IN-MAL-2026-016424","import_time":"2026-08-06T14:19:48.497178805Z","modified_time":"2026-08-06T13:27:07Z","sha256":"a7f119f7622c8874ef779e15bed666f0659a7a85b1f6a4cac5648264d8d2deb7","source":"amazon-inspector","versions":["0.1.279"]},{"id":"IN-MAL-2026-016436","import_time":"2026-08-06T14:19:49.043130639Z","modified_time":"2026-08-06T13:28:58Z","sha256":"10f60ac8ac68b9ea34e1f0147a4675a283561910df3a8bcd48c91a6af7acd7f5","source":"amazon-inspector","versions":["0.1.308"]},{"id":"IN-MAL-2026-016437","import_time":"2026-08-06T14:19:49.078789432Z","modified_time":"2026-08-06T13:29:08Z","sha256":"3afbdda9662510b9bc36c58767b424e1ba47838b50783dbd7b977490ed2119cf","source":"amazon-inspector","versions":["0.1.294"]},{"id":"IN-MAL-2026-016442","import_time":"2026-08-06T14:19:49.632650021Z","modified_time":"2026-08-06T13:29:59Z","sha256":"aa37dc54b80236fe0d1bf7eca73200bd31762e207d0e64c9d90a9690a6c21c8c","source":"amazon-inspector","versions":["0.1.281"]},{"id":"IN-MAL-2026-016423","import_time":"2026-08-06T14:19:48.416702521Z","modified_time":"2026-08-06T13:26:57Z","sha256":"dd3fefbf53f93e3bbe09b9f03c6f7c73e259775c48aa3ebd8ead653afc411faf","source":"amazon-inspector","versions":["0.1.287"]},{"id":"IN-MAL-2026-016429","import_time":"2026-08-06T14:19:48.722212839Z","modified_time":"2026-08-06T13:27:53Z","sha256":"08f8c8942bfdf12a4b8e00b4306ec0b629024a6d39bf1d378824b439ba724356","source":"amazon-inspector","versions":["0.1.320"]},{"id":"IN-MAL-2026-016428","import_time":"2026-08-06T14:19:48.666094221Z","modified_time":"2026-08-06T13:27:43Z","sha256":"1de63a0d2014350f180994ab39b5b7cd004ec85cec18dead9906d970e20ed6fc","source":"amazon-inspector","versions":["0.1.323"]},{"id":"IN-MAL-2026-016448","import_time":"2026-08-06T14:19:49.931953879Z","modified_time":"2026-08-06T13:30:55Z","sha256":"6044506d0bb6c1093350c48a802db939c8d8926e6c35c64f68ea7cf1b00beab9","source":"amazon-inspector","versions":["0.1.270"]},{"id":"IN-MAL-2026-016425","import_time":"2026-08-06T14:19:48.545359414Z","modified_time":"2026-08-06T13:27:17Z","sha256":"629d3769a58cc71939ce3ceb9b8034ca9f51f7789c84a92d6580e3090251b0a7","source":"amazon-inspector","versions":["0.1.303"]},{"id":"IN-MAL-2026-016432","import_time":"2026-08-06T14:19:48.874493123Z","modified_time":"2026-08-06T13:28:19Z","sha256":"7e2ee45ea00f90911f0ff5b59d9e467009d1f4b226d1dedab0e5f60fb00ea6a7","source":"amazon-inspector","versions":["0.1.316"]},{"id":"IN-MAL-2026-016430","import_time":"2026-08-06T14:19:48.761110006Z","modified_time":"2026-08-06T13:28:01Z","sha256":"90f7f274748137bc2bba20582fcba672d868fdf172de49c93f43028610b0a43a","source":"amazon-inspector","versions":["0.1.322"]},{"id":"IN-MAL-2026-016412","import_time":"2026-08-06T14:19:47.775743458Z","modified_time":"2026-08-06T13:25:09Z","sha256":"a54ab78ab4051000c97688fa8ba82c80a76dd421c40b80ef9dfec2932d91a360","source":"amazon-inspector","versions":["0.1.277"]},{"id":"IN-MAL-2026-016417","import_time":"2026-08-06T14:19:48.126428451Z","modified_time":"2026-08-06T13:26:00Z","sha256":"a65773f09ae0629d99d6e77e6b3162a0ecc032d49f4d1f1e80accd654c1a935a","source":"amazon-inspector","versions":["0.1.278"]},{"id":"IN-MAL-2026-016413","import_time":"2026-08-06T14:19:47.813091475Z","modified_time":"2026-08-06T13:25:20Z","sha256":"26fec2ed49b27382954612c21ee577ed4505e1723692f0728db846047da60bad","source":"amazon-inspector","versions":["0.1.284"]},{"id":"IN-MAL-2026-016435","import_time":"2026-08-06T14:19:49.005843416Z","modified_time":"2026-08-06T13:28:51Z","sha256":"9c5ba8cbffba24b651538873b170c5513151be1fe8aea22f99edf927325988e3","source":"amazon-inspector","versions":["0.1.311"]},{"id":"IN-MAL-2026-016419","import_time":"2026-08-06T14:19:48.227972202Z","modified_time":"2026-08-06T13:26:23Z","sha256":"5d6dfe55a8f420dbe3f483f20e0e464b344914749be12ae0b9d91893bf7be93e","source":"amazon-inspector","versions":["0.1.296"]},{"id":"IN-MAL-2026-016427","import_time":"2026-08-06T14:19:48.619899386Z","modified_time":"2026-08-06T13:27:30Z","sha256":"6e6ead7b2d42dbf14db5f762261808c904c1c3651fe7c64ef62239ef9bcb307a","source":"amazon-inspector","versions":["0.1.324"]},{"id":"IN-MAL-2026-016415","import_time":"2026-08-06T14:19:47.948893039Z","modified_time":"2026-08-06T13:25:39Z","sha256":"76927680c892820a7356d7a2a7d8067a3bab8c185ae5292da5936ea40b1ce969","source":"amazon-inspector","versions":["0.1.275"]},{"id":"IN-MAL-2026-016410","import_time":"2026-08-06T14:19:47.665017965Z","modified_time":"2026-08-06T13:24:51Z","sha256":"d6eda73a24dcaadefafc9d5c51ce68a38af3a0bb3567f19edbcb0487159c0558","source":"amazon-inspector","versions":["0.1.318"]},{"id":"IN-MAL-2026-016416","import_time":"2026-08-06T14:19:48.048536183Z","modified_time":"2026-08-06T13:25:52Z","sha256":"1e1631888c5e02e2079bba55868e5c11e5a060386d7e326c9ddc5694f153ccc1","source":"amazon-inspector","versions":["0.1.274"]},{"id":"IN-MAL-2026-016434","import_time":"2026-08-06T14:19:48.954816895Z","modified_time":"2026-08-06T13:28:38Z","sha256":"4c2b8df370a7e139cdbe7add6b6245c8237d2c85f6c4135e2d25f6d4100522db","source":"amazon-inspector","versions":["0.1.312"]},{"id":"IN-MAL-2026-016420","import_time":"2026-08-06T14:19:48.26263498Z","modified_time":"2026-08-06T13:26:32Z","sha256":"6442aa18e474535f8d89b662a82d7a024bc85b81ba746d324edfaaa8343b6a99","source":"amazon-inspector","versions":["0.1.298"]},{"id":"IN-MAL-2026-016421","import_time":"2026-08-06T14:19:48.305443664Z","modified_time":"2026-08-06T13:26:40Z","sha256":"a7018626958a160ab35a17b31ddd130ba9b6046b870f115b0fa83622b66bd912","source":"amazon-inspector","versions":["0.1.302"]},{"id":"IN-MAL-2026-016445","import_time":"2026-08-06T14:19:49.744673548Z","modified_time":"2026-08-06T13:30:24Z","sha256":"0599cf46b13d8e49970defa6efcab5c3c5c443b69e23410c5b6ea39f9de9e771","source":"amazon-inspector","versions":["0.1.292"]},{"id":"IN-MAL-2026-016441","import_time":"2026-08-06T14:19:49.575874963Z","modified_time":"2026-08-06T13:29:45Z","sha256":"6f4c497a94bb043382fd02a3a770121074908c2b33ba44466c342bfd9f9b0422","source":"amazon-inspector","versions":["0.1.282"]},{"id":"IN-MAL-2026-016438","import_time":"2026-08-06T14:19:49.119984296Z","modified_time":"2026-08-06T13:29:15Z","sha256":"738c5859cfa0d45ec880a457799d477dac5ae128f340b7499b742438d0bafdd6","source":"amazon-inspector","versions":["0.1.304"]},{"id":"IN-MAL-2026-016433","import_time":"2026-08-06T14:19:48.908999291Z","modified_time":"2026-08-06T13:28:29Z","sha256":"f31aebf266e0b372b02ce60a45d3e526a979434f5c9eab63559cd62e30439471","source":"amazon-inspector","versions":["0.1.314"]},{"id":"IN-MAL-2026-016444","import_time":"2026-08-06T14:19:49.710012663Z","modified_time":"2026-08-06T13:30:17Z","sha256":"ffedf56aa5c1a180796cb8b10399aba76e466238dfe46240c13dd4711c92f295","source":"amazon-inspector","versions":["0.1.273"]},{"id":"IN-MAL-2026-016447","import_time":"2026-08-06T14:19:49.884236644Z","modified_time":"2026-08-06T13:30:43Z","sha256":"0c2db810c52cb641ba0eadab0e0312d9a2f98eff6d34cee160f8fe44acdfd7a4","source":"amazon-inspector","versions":["0.1.271"]},{"id":"IN-MAL-2026-016414","import_time":"2026-08-06T14:19:47.917817905Z","modified_time":"2026-08-06T13:25:28Z","sha256":"0d69969cfdb50817d375081008c9f006ffdf855f1abece639a87166298ec9f68","source":"amazon-inspector","versions":["0.1.289"]},{"id":"IN-MAL-2026-016418","import_time":"2026-08-06T14:19:48.176974773Z","modified_time":"2026-08-06T13:26:09Z","sha256":"3a308c26270ade143293f2b3364bec9a377b369dd93bee6ebdca0566a1dfff51","source":"amazon-inspector","versions":["0.1.307"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}