seekcode

{"modified":"2026-05-26T05:55:04Z","published":"2026-05-20T07:06:55Z","schema_version":"1.7.4","id":"MAL-2026-4667","summary":"Malicious code in seekcode (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (6f4fe5d868d0434123b1a29a739072fe0e0ec0f2efd1ceda4d2c16ccffecf105)\nWhen a user selects the advertised `deepseek-cn` provider, the package's `defaultBaseUrlForProvider` function in dist/chunk-6U42R724.js returns `https://api.deepseeki.com` — a one-character typosquat of the legitimate `api.deepseek.com`. All sibling cases in the same switch correctly return their official provider endpoints (api.deepseek.com, integrate.api.nvidia.com, openrouter.ai, etc.); only the `deepseek-cn` branch redirects to the lookalike. Any user invoking this provider will send their DeepSeek API bearer token and the full content of every chat prompt to an attacker-controlled domain that mimics DeepSeek's China endpoint. Both the credential leak and the prompt content (which routinely contains private code, secrets, and proprietary data when used through a coding assistant) accrue to whoever controls api.deepseeki.com. The asymmetry between this branch and every other branch in the same function rules out a typo: a typo in a published artifact would normally be caught against at least one of the well-known sibling URLs, but here only the lookalike domain — which a typo is exceedingly unlikely to land on by accident — is wired in.\n","affected":[{"package":{"ecosystem":"npm","name":"seekcode"},"versions":["0.4.4","0.4.0","0.4.6"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"dist/chunk-6U42R724.js","sha256":"d2b25f856a390775613434295ca52912f980d031e841e45e463cb3324b04f11c","tlsh":"6bb4d784b4fa34224b5361a5699b6011ba789103350de8d5f69cc2a03fddabcc3b7f9d"}],"package_integrity":[{"filename":"seekcode-0.4.4.tgz","hashes":{"sha1":"aaa30eaa9172bc704d6a3f0ff545185999e84fe0","sha512_sri":"sha512-1J7LcwuGgnMGAtbIFSHQoUBRnkIWDjwX0s/sn/VYrBNtg5sljLyqyFnmAAWdCtWj9ZcaOVLUZgmmptG86xOp5Q=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/seekcode/v/0.4.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/seekcode/v/0.4.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/seekcode/v/0.4.6"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-003772","import_time":"2026-05-26T05:51:17.130955727Z","modified_time":"2026-05-21T07:30:22Z","sha256":"6f4fe5d868d0434123b1a29a739072fe0e0ec0f2efd1ceda4d2c16ccffecf105","source":"amazon-inspector","versions":["0.4.4"]},{"id":"IN-MAL-2026-003479","import_time":"2026-05-26T05:50:43.39005044Z","modified_time":"2026-05-20T07:06:55Z","sha256":"b8852647eca995e6db754b011e2c0d6574508d897437fc6ca5f6e3765a80ea40","source":"amazon-inspector","versions":["0.4.0"]},{"id":"IN-MAL-2026-004614","import_time":"2026-05-26T05:52:57.034065184Z","modified_time":"2026-05-25T09:29:39Z","sha256":"a76eea9351b26baf82114f15696a6458b43cb1473af5b885990113519ee803e5","source":"amazon-inspector","versions":["0.4.6"]}]}}