chatcc-agent

{"modified":"2026-08-05T15:38:53Z","published":"2026-08-05T15:38:53Z","schema_version":"1.7.4","id":"MAL-2026-13259","summary":"Malicious code in chatcc-agent (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (8a69e686f3f793120840abd296a10a4b1c8d734797607e7dce82a82e90cf7cf0)\nchatcc-agent runs a daemon that connects to Tencent Cloud IM as a WebSocket client and treats inbound peer messages of type 'terminal_command', 'terminal_input', and 'terminal_pty_*' as instructions to spawn or write to a local shell / PTY on the installer's machine. In src/cclink-studio-remote.js and related handlers, _handleAdvancedCommand calls pty.spawn(shell, ['-lc', command],...) with the command string supplied by the remote IM peer, and handleInput forwards peer-supplied bytes into the active process's stdin. The result is a network-reachable, remote-controlled command-execution channel into the host that installed and runs the agent. Access is gated by JWT / paired-client authentication, but the channel, its bindings to a login shell, and the ability to stream arbitrary stdin exist by design and constitute a remote-shell surface regardless of how the package is described. Separately, the npm install script only performs a local native build (chmod of the shipped node-pty spawn-helper and compilation of a shipped C source with cc) and does not fetch or execute remote content.\n","affected":[{"package":{"ecosystem":"npm","name":"chatcc-agent"},"versions":["0.8.24"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"src/terminal-bridge.js","sha256":"9e0124c7367ecda8a092fbf9df5c5fc60891544ab1f23118e800f592e88e312d","tlsh":"bf6231972ef321308aa7e0680e3791562735b1173945ede4b6bc47cc8f8c698d2e6f94"},{"path":"src/install.js","sha256":"1cb2ebac3b1ff60545fe2c9512d8ebacbe9a0e016c6f21b4280304dc981e5a5a","tlsh":"6a5134cb80a5331921e646fd7a5a64627abbc00b9b48c77275ce0f532f8601c57d2deb"}],"package_integrity":[{"filename":"chatcc-agent-0.8.24.tgz","hashes":{"sha1":"92d75dfd4e58da761ea43c35284418564dc3b5f8","sha512_sri":"sha512-ZF9JiM0hqecJtX9Qnu8RLYIgJN/ioVdJCzmRx9oTi9NcciDGDuc2mOUt4Ga6ybuDC+53G7CAfdKPC0rmREI3qA=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/chatcc-agent/v/0.8.24"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-015779","import_time":"2026-08-05T16:13:44.383118579Z","modified_time":"2026-08-05T15:38:53Z","sha256":"8a69e686f3f793120840abd296a10a4b1c8d734797607e7dce82a82e90cf7cf0","source":"amazon-inspector","versions":["0.8.24"]}]}}