@ai-support-agent/cli

{"schema_version":"1.7.4","id":"MAL-2026-10707","published":"2026-07-16T18:48:58Z","modified":"2026-08-06T14:21:50.647743229Z","summary":"Malicious code in @ai-support-agent/cli (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (bbbb67d5fa1c4b90e7da8e409f66e2e4ced88c5baa6eb14aa33d1d698d5baf69)\nThe `@ai-support-agent/cli` package installs a long-running daemon (`ai-support-agent start`) that connects to a vendor API (default `wss://api.ai-support-agent.com/ws/agent-terminal` and matching AppSync/HTTP endpoints) and executes remote-delivered commands against the local host. In `dist/vscode/vscode-server.js` and related files, `handleStdin` base64-decodes WebSocket message payloads and writes them straight into a local PTY (`session.write(decoded)`), giving a caller with a valid token an interactive shell on the machine running the agent. A separate command-dispatch path handles structured messages including `execute_command` (shell), `file_read`/`file_write`/`file_delete`/`file_mkdir`, `process_list`/`process_kill`, `chat` (spawns Claude Code / arbitrary subprocess), and `setup`/`reboot`/`update`, streaming results back to the vendor. `darwin-service.js` and `linux-service.js` install the agent as a persistent system service that starts on boot, and the daemon reaches the vendor over the public internet by default. Anyone who legitimately holds — or who compromises — the vendor API endpoint has full-host remote code execution, filesystem read/write, process control, and reboot capability on every machine running this agent. The daemon behavior is documented as the product's purpose (Web UI drives remote shell/file/process operations), but the network-to-PTY and network-to-exec paths are a persistent backdoor by construction regardless of framing, and blast radius extends to any future compromise of the vendor's control plane.\n","affected":[{"package":{"name":"@ai-support-agent/cli","ecosystem":"npm"},"versions":["0.3.2-beta.1","0.4.2","0.3.2-beta.15","0.3.2-beta.9","0.3.2-beta.2","0.3.5-beta.5","0.3.7-beta.0","0.4.0","0.3.2-beta.10","0.3.5","0.4.2-beta.0","0.3.6","0.3.6-beta.0","0.3.2-beta.0","0.3.2-beta.8","0.4.1","0.3.2-beta.5","0.3.5-beta.3","0.3.5-beta.0","0.4.1-beta.1","0.3.5-beta.4","0.3.2-beta.3","0.3.2-beta.11","0.3.2","0.3.2-beta.14","0.3.3-beta.0","0.3.2-beta.4","0.3.6-beta.1","0.3.5-beta.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"dist/browser/browser-local-server.js","sha256":"cacf3ceca145410d0c3c7ec95e0d50a4f2afd317a0b36348e5e262e4b4ab0be3","tlsh":"c652208539fb617295b7e29b1f6ba402a73b82073180ce94fb9d97104f0c94487d6ef8"},{"path":"dist/cli/service/darwin-service.js","sha256":"426cec5d7af6930e6dd7c47cbd71749d28557357561fa3677090fed8994e4a1c","tlsh":"5de2d8099de5d23466d2d55e2b076820fd2ac2133a54f974b6dcc788af4241c42bfbeb"},{"path":"dist/cli/service/linux-service.js","sha256":"37b78bd607e1626b8e0e2558a5b416f478b01d955493093ca4d1fcfae7f54d2e","tlsh":"1823b72a9eb5d336a691d16c2b0b7811fa2b92176704f9307adcc348df42458437eee7"},{"path":"dist/constants.js","sha256":"17ef459da6b8b0863f5284ebda04c69a96d4d66cdd17c7a4d652d82346654e6e","tlsh":"7bd2d52f692c9bf0134418601714f8933d1fd5977e1aa134f0a9db648a9fc9aca35be3"},{"path":"dist/vscode/vscode-server.js","sha256":"bcf8f8912001cda41ea86d3105c012c3e948f8ea0cd540d9127c6c6f0998d52e","tlsh":"6e72d80e57fb903a44f368691b0b6102731e9f87e615ea347b5cd3d1af4265c7190af4"}],"package_integrity":[{"filename":"cli-0.3.2-beta.1.tgz","hashes":{"sha1":"c4aac3ffac26c8977f737add3d8fa7d614d853e4","sha512_sri":"sha512-I97HCE1arXzew361QjFZAFnKY8eZzSqLxnbadQyw6BTh4Rdqhou/Dng6cPro85LekYhZOXK2eCN/WSgdOyN9tw=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.4.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.15"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.9"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.5-beta.5"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.7-beta.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.4.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.10"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.5"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.4.2-beta.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.6"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.6-beta.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.8"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.4.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.5"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.5-beta.3"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.5-beta.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.4.1-beta.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.5-beta.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.3"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.11"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.14"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.3-beta.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.2-beta.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.6-beta.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ai-support-agent/cli/v/0.3.5-beta.1"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-010795","import_time":"2026-07-16T18:54:05.261601401Z","modified_time":"2026-07-16T18:48:58Z","sha256":"9e75ec61a75a0063b3e468c17ed905250c786c148bc8e30edfa93e20c4a19a54","source":"amazon-inspector","versions":["0.3.2-beta.1"]},{"id":"IN-MAL-2026-015839","import_time":"2026-08-05T18:07:51.245251958Z","modified_time":"2026-08-05T18:05:03Z","sha256":"224b5ea781d96c80043c5aa202f9846f7f518c16cd9ccc993bee1c00f3a71626","source":"amazon-inspector","versions":["0.4.2"]},{"id":"IN-MAL-2026-016457","import_time":"2026-08-06T14:19:50.411420823Z","modified_time":"2026-08-06T13:32:15Z","sha256":"f0f2da3d4305d7d53c2e7fea8fd863d66fcbac979270c16ddc09c4ea35fead79","source":"amazon-inspector","versions":["0.3.2-beta.15"]},{"id":"IN-MAL-2026-016464","import_time":"2026-08-06T14:19:50.769465184Z","modified_time":"2026-08-06T13:33:24Z","sha256":"286534dc8c04d94608c556e1511005ed3096ad1607ef5f5a5e628c0ea4ec4ce5","source":"amazon-inspector","versions":["0.3.2-beta.9"]},{"id":"IN-MAL-2026-016463","import_time":"2026-08-06T14:19:50.724120222Z","modified_time":"2026-08-06T13:33:13Z","sha256":"46bbfbbfa0829ab59a333f2dcb5c92021a8e210e0645a9afec3b36aa270e157f","source":"amazon-inspector","versions":["0.3.2-beta.2"]},{"id":"IN-MAL-2026-016470","import_time":"2026-08-06T14:19:51.031590618Z","modified_time":"2026-08-06T13:34:19Z","sha256":"48ee80cf5df6978d739182fe22b664959bb028a512057d4c9483b6844eb66d42","source":"amazon-inspector","versions":["0.3.5-beta.5"]},{"id":"IN-MAL-2026-016453","import_time":"2026-08-06T14:19:50.21580311Z","modified_time":"2026-08-06T13:31:42Z","sha256":"522c0bf36ee9925d8884ea4eac0474cef8e3e76320498ffc983c8ceb34019b83","source":"amazon-inspector","versions":["0.3.7-beta.0"]},{"id":"IN-MAL-2026-016474","import_time":"2026-08-06T14:19:51.272520352Z","modified_time":"2026-08-06T13:34:54Z","sha256":"53f40240dc34864e9971de5522fa856b98c0fdbaf3ea7c7e4da5a95a99363549","source":"amazon-inspector","versions":["0.4.0"]},{"id":"IN-MAL-2026-016450","import_time":"2026-08-06T14:19:50.084934328Z","modified_time":"2026-08-06T13:31:15Z","sha256":"78c3b32a529f186fbeee1d15ef5656eca8f0a9f9af509db4a0b7b7e483948b17","source":"amazon-inspector","versions":["0.3.2-beta.10"]},{"id":"IN-MAL-2026-016468","import_time":"2026-08-06T14:19:50.939474667Z","modified_time":"2026-08-06T13:34:02Z","sha256":"888aa9fa0f2120014fc22bacf78c4343123ee41b7007b2636ce744e6f4123a1a","source":"amazon-inspector","versions":["0.3.5"]},{"id":"IN-MAL-2026-016472","import_time":"2026-08-06T14:19:51.142027372Z","modified_time":"2026-08-06T13:34:36Z","sha256":"97817fb6965bb38ec1e8a0c13d79c4b411511b6d5bd31b52466f1506b7a63e34","source":"amazon-inspector","versions":["0.4.2-beta.0"]},{"id":"IN-MAL-2026-016471","import_time":"2026-08-06T14:19:51.092381818Z","modified_time":"2026-08-06T13:34:28Z","sha256":"2937552c2553c52e605076ddfca3adfae4caa789fea1aba8dc37386455784462","source":"amazon-inspector","versions":["0.3.6"]},{"id":"IN-MAL-2026-016475","import_time":"2026-08-06T14:19:51.305561054Z","modified_time":"2026-08-06T13:35:05Z","sha256":"528281b3508567c0b34eb86417ec31ba55f62d34a864efae616e5a284c8546b1","source":"amazon-inspector","versions":["0.3.6-beta.0"]},{"id":"IN-MAL-2026-016462","import_time":"2026-08-06T14:19:50.675105693Z","modified_time":"2026-08-06T13:32:59Z","sha256":"542ef569799b2cef41118d2e4cd4d5e1ae667023b0cde7e6889f2aedd31c6b5b","source":"amazon-inspector","versions":["0.3.2-beta.0"]},{"id":"IN-MAL-2026-016456","import_time":"2026-08-06T14:19:50.382371224Z","modified_time":"2026-08-06T13:32:07Z","sha256":"5a7995fb845a98c6d74a2445316baa48c433b3530bc69f2100325fbba6acb848","source":"amazon-inspector","versions":["0.3.2-beta.8"]},{"id":"IN-MAL-2026-016459","import_time":"2026-08-06T14:19:50.486518017Z","modified_time":"2026-08-06T13:32:32Z","sha256":"7b218b111cd6149cfd866fd3fddc43d8b38b8daf4e704a2ceb1e6fcfa6d125bf","source":"amazon-inspector","versions":["0.4.1"]},{"id":"IN-MAL-2026-016452","import_time":"2026-08-06T14:19:50.165281682Z","modified_time":"2026-08-06T13:31:33Z","sha256":"abea757361df9c2cdfcb2c4f412f5df72a297aa319b06e5ca7d0f917b1d34653","source":"amazon-inspector","versions":["0.3.2-beta.5"]},{"id":"IN-MAL-2026-016469","import_time":"2026-08-06T14:19:50.974869596Z","modified_time":"2026-08-06T13:34:10Z","sha256":"baf485d66bf18f87d79a84c1761dcacad5c77f1450647f48943145e96a19ae9e","source":"amazon-inspector","versions":["0.3.5-beta.3"]},{"id":"IN-MAL-2026-016467","import_time":"2026-08-06T14:19:50.891897199Z","modified_time":"2026-08-06T13:33:51Z","sha256":"e455630b30e6f842c00fd3f2472fc8a0bc0d7256a8d642f2a86be5ddaf801021","source":"amazon-inspector","versions":["0.3.5-beta.0"]},{"id":"IN-MAL-2026-016473","import_time":"2026-08-06T14:19:51.184683503Z","modified_time":"2026-08-06T13:34:44Z","sha256":"04e3fd0d83e86f7f32b36665137126570f3d59e17b2f8c4b8e80e914a4bb60fb","source":"amazon-inspector","versions":["0.4.1-beta.1"]},{"id":"IN-MAL-2026-016449","import_time":"2026-08-06T14:19:49.973296346Z","modified_time":"2026-08-06T13:31:03Z","sha256":"1bbdac8e1ff8d9c7f394910dc883bf000095cd4adbcdd87b7836b9af16764772","source":"amazon-inspector","versions":["0.3.5-beta.4"]},{"id":"IN-MAL-2026-016466","import_time":"2026-08-06T14:19:50.860028499Z","modified_time":"2026-08-06T13:33:41Z","sha256":"91bcb4f32f04a3b6aa3ae08468e2881d6ca7e22aeaea4e7c15fa3dcfc4932499","source":"amazon-inspector","versions":["0.3.2-beta.3"]},{"id":"IN-MAL-2026-016455","import_time":"2026-08-06T14:19:50.32311641Z","modified_time":"2026-08-06T13:31:59Z","sha256":"bbbb67d5fa1c4b90e7da8e409f66e2e4ced88c5baa6eb14aa33d1d698d5baf69","source":"amazon-inspector","versions":["0.3.2-beta.11"]},{"id":"IN-MAL-2026-016460","import_time":"2026-08-06T14:19:50.553155848Z","modified_time":"2026-08-06T13:32:40Z","sha256":"e60625fefc9e7e837914b43b55da40a369476f20b6af433d2346975caf0765dd","source":"amazon-inspector","versions":["0.3.2"]},{"id":"IN-MAL-2026-016461","import_time":"2026-08-06T14:19:50.59947347Z","modified_time":"2026-08-06T13:32:50Z","sha256":"267c829247ec7038f7dc7ea8d76ac2636e72f96e2ae7279fd621003310edeee9","source":"amazon-inspector","versions":["0.3.2-beta.14"]},{"id":"IN-MAL-2026-016465","import_time":"2026-08-06T14:19:50.811700071Z","modified_time":"2026-08-06T13:33:33Z","sha256":"884d5ee0141a46fbf5c04371ed601b7a77db7cad0b371119772b1cbbcce7b0ff","source":"amazon-inspector","versions":["0.3.3-beta.0"]},{"id":"IN-MAL-2026-016451","import_time":"2026-08-06T14:19:50.133948839Z","modified_time":"2026-08-06T13:31:23Z","sha256":"89ddcf114672d82be128344d7cbf8ff677461f841b235c62561fa3eee1508848","source":"amazon-inspector","versions":["0.3.2-beta.4"]},{"id":"IN-MAL-2026-016458","import_time":"2026-08-06T14:19:50.455885006Z","modified_time":"2026-08-06T13:32:26Z","sha256":"e513c9b65cbb0866ea634b75b1fcdcdb96ce1936720661ac6bb8005aab60b4ee","source":"amazon-inspector","versions":["0.3.6-beta.1"]},{"id":"IN-MAL-2026-016454","import_time":"2026-08-06T14:19:50.265076188Z","modified_time":"2026-08-06T13:31:50Z","sha256":"ec5b6b46f057cc871ace3b95229b730c73ed525695bda0d456befeebdfe4c1da","source":"amazon-inspector","versions":["0.3.5-beta.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}