@ch4acko3/frontal-lobe

{"modified":"2026-08-06T23:29:17Z","published":"2026-08-06T15:50:36Z","schema_version":"1.7.4","id":"MAL-2026-13430","summary":"Malicious code in @ch4acko3/frontal-lobe (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (b73f6f94b2fcc3ef2aabd490862d743e9722f891d2c41421b1352dc318294585)\nThe package hardcodes the endpoint http://47.112.15.137:8789/frontal/trace-sync (bare IPv4, plain HTTP) in lib/frontal-gateway/dist/trace-sync-rollout-receiver.js and uploads full Codex/Claude AI session rollouts — the user's prompts, model outputs, and source-code context — as gzip+base64 chunks, along with trace events that by default include memory query/recall/writeback text. The postinstall lifecycle script bin/frontal-codex-plugin-postinstall.mjs writes ~/.frontal_lobe/config.toml with [trace.sync] enabled = true and interval_minutes = 30, prompts the user for a Memorax user_id and silently reuses it as the trace-sync identity via resolveTraceSyncUserId, and starts the gateway backend via startBackendAndCheck, which runs a periodic background flush. The trace-sync destination is not configurable, differs from the documented test-code.beta.memorax.net service, is a bare IP over plaintext HTTP, and is activated at install time with no distinct opt-in for this channel. The seeded config's internal label describing this as an approved-test-user internal trace sync does not constitute user consent.\n","affected":[{"package":{"ecosystem":"npm","name":"@ch4acko3/frontal-lobe"},"versions":["0.1.12","0.1.12-preview.2","0.1.14"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"lib/frontal-gateway/dist/trace-sync-config.js","sha256":"5cf4b922caef4240de4d08047bf691f692be9346cba17138b5a9b68961a8b0dd","tlsh":"56813606a8d79d320a11f498995fa011aee82b83011cb0e9f56d33583fde8b441f3fad"},{"path":"lib/frontal-gateway/dist/trace-sync-client.js","sha256":"54b0f4a18ccb64765c565c050f930944d34cd2c7c4211c5670e280cb7f9ba3fa","tlsh":"790243b52cb3161142e770e8a75f84097337416339d8e8e87e2c91402f9d8685bf3eda"}],"package_integrity":[{"filename":"frontal-lobe-0.1.12.tgz","hashes":{"sha1":"e4b1bdb17ae9bc7bdab33ffc0255ebbc261f21a0","sha512_sri":"sha512-dhOWVBglY7FelF9qjYht9jYtMjohgtbC/tvNTTDONuIWsJNgAvcSocWwZlL/fk/G/X0ZvOUh13DFpvYpDJPpIA=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ch4acko3/frontal-lobe/v/0.1.12"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ch4acko3/frontal-lobe/v/0.1.12-preview.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ch4acko3/frontal-lobe/v/0.1.14"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-016661","import_time":"2026-08-06T18:09:02.700876865Z","modified_time":"2026-08-06T15:50:36Z","sha256":"446244dfd4510206ea9f62ce772ce70964f8197789c10c27dd13fe24ef7def44","source":"amazon-inspector","versions":["0.1.12"]},{"id":"IN-MAL-2026-016663","import_time":"2026-08-06T18:09:02.943742998Z","modified_time":"2026-08-06T15:50:53Z","sha256":"f0f6d31f94799ff575e6cf35bc9b306d20fb422a3349824526e034fd7c7281d8","source":"amazon-inspector","versions":["0.1.12-preview.2"]},{"id":"IN-MAL-2026-016662","import_time":"2026-08-06T18:09:02.814930412Z","modified_time":"2026-08-06T15:50:45Z","sha256":"b73f6f94b2fcc3ef2aabd490862d743e9722f891d2c41421b1352dc318294585","source":"amazon-inspector","versions":["0.1.14"]}]}}