@umschool/platform

{"modified":"2026-09-09T15:19:20Z","published":"2026-09-09T14:50:58Z","schema_version":"1.7.4","id":"MAL-2026-16082","summary":"Malicious code in @umschool/platform (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (bcf64895a777467cc94763bfb942be3c04040ca151fc22753ca48ac4aaecd69c)\n@umschool/platform@999.0.1 is published to public npm under an internal-looking scope with an implausibly high version number, a resolution shape used to override internal builds. Its postinstall.js runs on `npm install` and performs a bulk harvest of installer-owned secrets: it reads the Kubernetes service-account token and namespace from /var/run/secrets/kubernetes.io/serviceaccount/, /etc/hosts and /etc/resolv.conf, queries cloud instance metadata services (AWS IMDS at 169.254.169.254 including IAM role credentials, ECS task-role credentials via 169.254.170.2 / AWS_CONTAINER_CREDENTIALS_RELATIVE_URI, Azure IMDS, and Yandex/GCP-compatible metadata), calls https://kubernetes.default.svc/api/v1/secrets with the harvested SA token as Bearer authorization, walks up to 8 parent directories reading.env files, and filters process.env against a credential regex (token|secret|key|pass|cred|auth|aws|jwt|api|stripe|sendgrid|twilio|...). The collected data is base64-encoded and POSTed to the hardcoded external endpoint https://akko.requestcatcher.com/dep-confusion-v2. The package's self-label as a 'Dependency Confusion PoC' does not change the effect: any build or CI environment that resolves this public package leaks its cloud IAM credentials, Kubernetes secrets, and environment secrets to an external host.\n","affected":[{"package":{"ecosystem":"npm","name":"@umschool/platform"},"versions":["999.0.2","999.0.1","999.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"postinstall.js","sha256":"6338f0bf7620e74ac2955bf281bc99a38b0761a34328ae4f1db3f896cc606371","tlsh":"7da167a420f6942b4eaad565e3affc1a9016f0033881de8cb3fc4e506f8b455a961dd5"}],"package_integrity":[{"filename":"platform-999.0.2.tgz","hashes":{"sha1":"0bc6394bc2ffc6220938806cfab17d6f3295dcad","sha512_sri":"sha512-8gJ+k6Let+Mz5MAORJgfz6yBxiCo8oClq6SF3NdpIxVHVvaZKOD6TAD857/xbl1U5sAvrYc+GZkYFQIMe/fEZA=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@umschool/platform/v/999.0.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@umschool/platform/v/999.0.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@umschool/platform/v/999.0.0"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-019857","import_time":"2026-09-09T15:17:29.147897674Z","modified_time":"2026-09-09T14:51:14Z","sha256":"0fefea4d6708fdfc40e784e5906d588dcf2e0cd98cb809de55f22aaf44b31ce9","source":"amazon-inspector","versions":["999.0.2"]},{"id":"IN-MAL-2026-019855","import_time":"2026-09-09T15:17:29.044697464Z","modified_time":"2026-09-09T14:50:58Z","sha256":"bcf64895a777467cc94763bfb942be3c04040ca151fc22753ca48ac4aaecd69c","source":"amazon-inspector","versions":["999.0.1"]},{"id":"IN-MAL-2026-019856","import_time":"2026-09-09T15:17:29.083930539Z","modified_time":"2026-09-09T14:51:06Z","sha256":"bf32ebb56edccccf87cabc4f5b811872f541fe79659252092d9d19e431152ec2","source":"amazon-inspector","versions":["999.0.0"]}]}}