concierge-sdk

{"schema_version":"1.7.4","id":"MAL-2026-16145","published":"2026-09-14T15:42:39Z","modified":"2026-09-14T17:17:15.131504770Z","summary":"Malicious code in concierge-sdk (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (4de458111994244a0a590117185f9e345ff27043c129d4ea24fcb3be5f98f67b)\nThe package's declared postinstall script executes exfil_v2.js at `npm install` time. That script harvests the full process environment, current working directory, and config/secret files (.env, secrets.json, /etc/environment, /etc/profile, workflow files, git-history secret matches), curls the Azure Instance Metadata Service at 169.254.169.254 to obtain a managed-identity access token for vault.azure.net and lists Key Vault secrets with it, and uses the runner's GITHUB_TOKEN against api.github.com to read repository secrets and Actions artifacts. All collected data is POSTed to a hardcoded webhook.site endpoint. A sibling exfil.js duplicates full process.env exfiltration to the same webhook.site collector under User-Agent `continental-sdk/1.0`.\n","affected":[{"package":{"name":"concierge-sdk","ecosystem":"npm"},"versions":["99.99.101","99.99.100","99.99.99"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"exfil_v3.js","sha256":"5df9dee9342f80d6641d8ef65a6b79a976286f607c0a820fc83f88167632d60a","tlsh":"2651326247e6417165e1e5872a1fa04b7603e0aa3612edf436dc03352f89b3866f36e9"}],"package_integrity":[{"filename":"concierge-sdk-99.99.101.tgz","hashes":{"sha1":"7738e6e9557385f4adafddb9d1ac5bbbe69896b1","sha512_sri":"sha512-bTXyP8PqheAcMRLAeWJwOj8rdswFpLN8hoGacKeiT6EwuxgqNIEjQJve+za/Tc6uyyR/vVEYHyRUODEG3hU0Aw=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/concierge-sdk/v/99.99.101"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/concierge-sdk/v/99.99.100"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/concierge-sdk/v/99.99.99"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-020020","import_time":"2026-09-14T16:19:12.191097464Z","modified_time":"2026-09-14T15:42:39Z","sha256":"63196bb3ca7cbb7e065a9cff120941ff3c3558c86ed1d40d6334384d4ce0a94c","source":"amazon-inspector","versions":["99.99.101"]},{"id":"IN-MAL-2026-020026","import_time":"2026-09-14T17:15:20.896144263Z","modified_time":"2026-09-14T16:44:54Z","sha256":"4de458111994244a0a590117185f9e345ff27043c129d4ea24fcb3be5f98f67b","source":"amazon-inspector","versions":["99.99.100"]},{"id":"IN-MAL-2026-020027","import_time":"2026-09-14T17:15:20.982428207Z","modified_time":"2026-09-14T16:45:05Z","sha256":"66484d698cb071edcee1b1fff6236fd881a151ef065c450e8bdee218c48fe3a9","source":"amazon-inspector","versions":["99.99.99"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}