MAL-2026-13355

    Dashboard / Malicious Package / MAL-2026-13355

    MAL-2026-13355

    Published: 5 Aug 2026Last Modified: 6 Aug 2026

    Summary: Malicious code in @astralcore/sl-aura (npm)

    Details: Source: amazon-inspector (91ae2c72e5e03d23f3f5704859e8c92b9ce6c565c6d14d744d4382b980a0d233) This WhatsApp bot package ships several mechanisms that give the author persistent remote control of any installer's running instance and access to the installer's WhatsApp account. config.env and config/index.js hardcode OWNER_NUMBERS (falling back to '94726800969' when unset) that parser.js uses to set isCreator/isOwner; src/commands/filemanager.js exposes creator-gated WhatsApp commands (.getfile,.putfile,.mkdir,.fullzip) that read arbitrary files under the bot project root, overwrite files, and zip the entire project tree back to the remote party — giving the hardcoded author numbers full file read/write and full-tree exfiltration over WhatsApp. config/index.js also defaults MONGODB_URI to 'mongodb+srv://unity-free:[email protected]/...', and src/commands/index.js persists the Baileys auth state (creds and signal keys — the full auth material for the paired WhatsApp account) into that database via useMongoDBAuthState, so an installer running with shipped defaults uploads their WhatsApp session credentials to a cluster whose credentials are controlled by the author, enabling remote account takeover. config.env additionally ships live TG_PAIR_BOT_TOKEN and TG_SUPER_BOT_TOKEN plus hardcoded TG_ADMIN_IDS; src/telegram/superBot.js polls these tokens at startup and gates commands (/pair, downloads, session management) on isAdmin() matching those hardcoded IDs, providing a second remote-control channel into every default-configured installer. The package also ships additional third-party credentials belonging to the author (Gemini API key, Gmail SMTP app password, dashboard secret/password).

    References: https://www.npmjs.com/package/@astralcore/sl-aura/v/1.0.6, https://www.npmjs.com/package/@astralcore/sl-aura/v/1.0.0, https://www.npmjs.com/package/@astralcore/sl-aura/v/1.0.5, https://www.npmjs.com/package/@astralcore/sl-aura/v/1.0.1, https://www.npmjs.com/package/@astralcore/sl-aura/v/1.0.4

    Affected packages

    Package

    Name: @astralcore/sl-aura

    Purl: pkg:npm/%40astralcore/sl-aura

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.6
    1.0.0
    1.0.5
    1.0.1
    1.0.4