wml-core

{"modified":"2026-05-26T05:55:05Z","published":"2026-05-25T14:16:02Z","schema_version":"1.7.4","id":"MAL-2026-4731","summary":"Malicious code in wml-core (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (46afe229d6efe1ef10d025302ed21e5c2c44bdd772c8fbb28d037cb1215c84ba)\nwml-core@99.0.1 is a dependency-confusion package targeting an internal `wml-*` namespace, published with an inflated version (99.0.1) to win npm resolution against an internal package of the same name. The `preinstall` script `poc.js` runs automatically on `npm install` and harvests: hostname, username, OS/platform info, full network configuration (`ipconfig /all` on Windows or `ip a` + `/etc/resolv.conf` on Linux), `whoami /all` / `id` output, git remote URLs, the parent project's `package.json`, CI configuration files (`.gitlab-ci.yml`, `.github/workflows/*`, `Jenkinsfile`, `azure-pipelines.yml`), and a filtered dump of `process.env` matching credential-bearing prefixes including `TOKEN`, `AWS`, `AZURE`, `NPM`, `GITHUB`, `GITLAB`, `JENKINS`, `WALMART`, `WMT`, `CI_`. The collected JSON blob is POSTed to `d8a5d9pon5bugoc35cngp9hcregcqyezu.oast.me` (an Interactsh out-of-band callback host) over HTTPS, with a DNS callback emitted as a side channel. Any installer outside the intended target scope — including unintended internal builds and any third party who installs this name — has their build environment, CI secrets, and cloud/registry tokens exfiltrated. The package's self-description as 'authorized bug bounty research' does not change installer-side harm: the payload fires unconditionally on any `npm install`.\n","affected":[{"package":{"ecosystem":"npm","name":"wml-core"},"versions":["99.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"domains":["wml-core-7363616e2d63643235663234623137.d8a5d9pon5bugoc35cngp9hcregcqyezu.oast.me","d8a5d9pon5bugoc35cngp9hcregcqyezu.oast.me"],"evidence_files":[{"path":"poc.js","sha256":"265df5fad051a363a33c9a0995299645cd2b6db8d556f8f73ea17e9e4f547ad5","tlsh":"2e71c7d482fa1e30226a74b1b5cd040522d7d3933246f9e4798c1a919f9f8b482f67bd"},{"path":"package.json","sha256":"4516918d309f587116006e26fdccdef42462a23cc8bc60d10e1d027929747785","tlsh":"7be07d78141010231ad8c2fa05b758479038cd0b1118ac290b93344c42eeb63017eb9d"}],"package_integrity":[{"filename":"wml-core-99.0.1.tgz","hashes":{"sha1":"18ca554d51f1778d3a1c9eb113d756d3973f98ff","sha512_sri":"sha512-iNmsyR/PYROCztSYZf+TA67GMIvIx0UsymiDPcF52SDn4dy8yqyGdUWnuzoLBL4RltUiq1pesnSHZIVgDsSOfw=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/wml-core/v/99.0.1"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-004689","import_time":"2026-05-26T05:53:05.587249717Z","modified_time":"2026-05-25T14:16:02Z","sha256":"46afe229d6efe1ef10d025302ed21e5c2c44bdd772c8fbb28d037cb1215c84ba","source":"amazon-inspector","versions":["99.0.1"]},{"id":"IN-MAL-2026-004691","import_time":"2026-05-26T05:53:05.789657256Z","modified_time":"2026-05-25T14:16:09Z","sha256":"9bb6cda0457187b67ae8822ebe66fe54310bfbecdd658f7beabab10cc54527a7","source":"amazon-inspector","versions":["99.0.1"]}]}}