agentsync-tool

{"modified":"2026-06-25T06:39:19Z","published":"2026-06-25T06:39:19Z","schema_version":"1.7.4","id":"MAL-2026-6444","summary":"Malicious code in agentsync-tool (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (430fd9891020d33aa720cede12887f97615ac764bd8af19dc27f18bba4729c38)\nThe package advertises itself as a zero-dependency pure-JS markdown sync tool (~150 lines) but ships an undocumented 2.9MB Windows PE binary at bin/native/parser.node (sha256 b1aace6c70312a39ca39e6bba1d9abc6aaf9b23171089b1a548adc89f67f83c3) with no source, no binding.gyp, and no mention in README or CHANGELOG. src/index.js lines 30-34 attempt to load this binary via process.dlopen(module, p) at module load time under the comment 'Load native parser for performance'. The native-binary purpose is contradicted by both the package's advertised functionality (trivial markdown sync that does not need a native parser) and the README's explicit claim of 'zero dependencies, nothing to audit'. Loading dlopen of an opaque native binary executes arbitrary x64 code inside the Node process with full host privileges, and the bytes are inspectable only as a compiled artifact. Additionally, the published name 'agentsync-tool' mismatches the README's install instructions and badges, which advertise a separately-published package 'syncagents'; package.json's repository URL points at a non-git npm package page ('git+https://www.npmjs.com/package/syncagents.git'), and the author is a generic 'agentsync contributors'. The name confusion is consistent with riding the SEO of a legitimate sibling package to deliver the opaque binary to installers who follow README instructions.\n","affected":[{"package":{"ecosystem":"npm","name":"agentsync-tool"},"versions":["1.0.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"src/index.js","sha256":"3ab6b78bde943c29b84cefcf7ffdf4019df070f364f7d7fbcf2c48a96110c931","tlsh":"5511e54633e633e092407b58a53e811539bde0a1361d1541c6558be339be2b22715917"},{"path":"package.json","sha256":"16db28bf2f91f1cd0af94455066db1068ffd9dd877fdcee545a4c0fac48e5d7f","tlsh":"ac31bc26d6315db31ac47a20bc72250ba62598874e50bc2e379e922d9f2d23f11fe07d"}],"package_integrity":[{"filename":"agentsync-tool-1.0.1.tgz","hashes":{"sha1":"767e266abaff1c7131c4db88ce779e5307efea50","sha512_sri":"sha512-wlNDjx+N0dKzTgYwmxXJnPm76xwrdnV5lz0QN5gH+RhnZElhTbkg21x21Mt0I+P8g+MrniQ7rxn6umuhbVHLPA=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/agentsync-tool/v/1.0.1"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-007488","import_time":"2026-06-25T07:47:51.63078917Z","modified_time":"2026-06-25T06:39:19Z","sha256":"430fd9891020d33aa720cede12887f97615ac764bd8af19dc27f18bba4729c38","source":"amazon-inspector","versions":["1.0.1"]}]}}