twilio-hackerone-poc-afe6937c

{"modified":"2026-08-15T16:10:06Z","published":"2026-08-15T15:57:00Z","schema_version":"1.7.4","id":"MAL-2026-14063","summary":"Malicious code in twilio-hackerone-poc-afe6937c (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (6790435b096935699da3234140accc517ced689047a68e698cae06288939eed9)\nOn npm install, preinstall/postinstall scripts execute `id`, read environment variables including AWS_LAMBDA_LOG_STREAM_NAME, list /var/task, and read parent process cmdline from /proc, then POST the collected host and environment metadata as JSON to a hardcoded webhook.site endpoint (https://webhook.site/b520829e-516a-45ff-980c-173aa54fc4bc). probe.js copies daemon.js to /tmp/.h1poc-daemon.js and spawns it detached via process.execPath with stdio ignored, writing pid and version to /tmp/.h1poc.pid and /tmp/.h1poc.ver so the process outlives npm install. The daemon polls /tmp every 100ms for sibling /tmp/AC<hex32> tenant directories, enumerates their service and package subpaths, and POSTs 'seen', heartbeat, and startup events (HOME, AWS_LAMBDA_FUNCTION_NAME, /var/task listing, `id` output, foreign/owned flags, tenant IDs, service and package names) to the same webhook for ~15 minutes. For tenant IDs in a hardcoded list, daemon.js writes a package.json and index.js under other tenants' `node_modules/h1-poc-marker/`, injecting a require-able module into another account's dependency tree. The package name and stated purpose reference a HackerOne proof-of-concept, but the shipped mechanisms — install-time exfiltration to an external inspection URL, a detached persistent background process, and cross-tenant writes into other accounts' node_modules — are the same primitives used in operational supply-chain attacks (host reconnaissance, persistence, dependency-tree injection).\n","affected":[{"package":{"ecosystem":"npm","name":"twilio-hackerone-poc-afe6937c"},"versions":["1.0.0","1.0.3","1.0.2","1.0.4","1.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"probe.js","sha256":"92cfb4306c6236f003b9d104be49da3ef8ac79daaa4ab2925fc31494c2cf94a3","tlsh":"0f3144d2a6b14350279205cba16b2341b6b7da113d4c94f0f5ac649f2f8f5145a739fc"},{"path":"daemon.js","sha256":"72e08face07965b764762a215ff6aeca0f3fce3b1071c6b1770f9e4f6b6b74b8","tlsh":"265176c1c2b2739c0b66425ad36b17806073c15a35c3ca94b46cb8db6fc2a4453df96c"}],"package_integrity":[{"filename":"twilio-hackerone-poc-afe6937c-1.0.0.tgz","hashes":{"sha1":"4d516302b0851d5f25f8e21d613cf4d2094b4207","sha512_sri":"sha512-kse8R43OiwxiHjYUhdLlGvJ4vONYkjJqUAAIoBIiGyJJkfP9tE3fA1r1c/ifZz67gN2HG5eXhVI2M5sP2ev54A=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/twilio-hackerone-poc-afe6937c/v/1.0.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/twilio-hackerone-poc-afe6937c/v/1.0.3"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/twilio-hackerone-poc-afe6937c/v/1.0.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/twilio-hackerone-poc-afe6937c/v/1.0.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/twilio-hackerone-poc-afe6937c/v/1.0.1"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-017957","import_time":"2026-08-15T16:07:56.450384944Z","modified_time":"2026-08-15T15:57:19Z","sha256":"19c2a9d2cdab0b3bd75ce3364e6b3c5476e4740a6af63a39670842113d3fa569","source":"amazon-inspector","versions":["1.0.0"]},{"id":"IN-MAL-2026-017955","import_time":"2026-08-15T16:07:56.293080802Z","modified_time":"2026-08-15T15:57:00Z","sha256":"27261a0c0023966885bee65790482154111bfd73840d6a83021b932b5ae71de4","source":"amazon-inspector","versions":["1.0.3"]},{"id":"IN-MAL-2026-017958","import_time":"2026-08-15T16:07:56.593011574Z","modified_time":"2026-08-15T15:57:31Z","sha256":"6790435b096935699da3234140accc517ced689047a68e698cae06288939eed9","source":"amazon-inspector","versions":["1.0.2"]},{"id":"IN-MAL-2026-017956","import_time":"2026-08-15T16:07:56.367370475Z","modified_time":"2026-08-15T15:57:09Z","sha256":"7ceeddfe5d15cd9d4a4a688dafd12102fbf03e042123e741260bd35307885cac","source":"amazon-inspector","versions":["1.0.4"]},{"id":"IN-MAL-2026-017960","import_time":"2026-08-15T16:07:56.718081241Z","modified_time":"2026-08-15T15:57:47Z","sha256":"e0e79177a677066c80be0c324268d57dc6174c9051546a4e7c325e4d6854e987","source":"amazon-inspector","versions":["1.0.1"]}]}}