MAL-2026-13364

    Dashboard / Malicious Package / MAL-2026-13364

    MAL-2026-13364

    Published: 5 Aug 2026Last Modified: 6 Aug 2026

    Summary: Malicious code in @ikbal_fadilah_vanexa01/vanexa-agent (npm)

    Details: Source: amazon-inspector (52b1477c5187703dab87d6be6933d62de4c4244ab3340586f85b530e05470aa1) Package ships an agent daemon (`vanexa-agent start`, entry `bin/vanexa-agent.js`) that receives commands from a remote phone app and executes them on the installer's host via `child_process`/`spawn`, including `powershell.exe` and inline JS/Python evaluation. Rather than the LAN-only WebSocket architecture described in the README (which claims BYOK with `no middleman`), the compiled bundle hardcodes two Cloudflare Workers endpoints — `vanexa-agent-relay.hanazaki542.workers.dev` and `vanexa-ai-proxy.hanazaki542.workers.dev` — hosted on a personal Cloudflare account (`hanazaki542`) that does not match the npm publisher (`ikbalsakata500445jensen`). Commands from the phone client and, via the AI proxy path, user-supplied prompt content and API tokens transit this third-party intermediary before reaching the local execution sinks on the installer's machine. The primary runtime is shipped as V8 bytecode (`dist/bundle.jsc`) produced from `dist/bundle.cjs` at postinstall via `bytenode.compileFile`, and the bin entry loads that bytecode with `require(bytecodePath)`, reducing auditability of the network-driven exec path. The combination — network-sourced commands flowing into local shell/child_process, a hardcoded author-controlled relay whose ownership does not match the publisher, and a bytecode-compiled payload — makes normal operator use of this agent equivalent to granting the relay operator remote command execution on the installer's host.

    References: https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.10, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.19, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.23, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.1.53, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.17, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.8, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.1.54, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.2.0, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.1.55, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.34, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.3, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.1.58, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.1.59, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.14, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.32, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.44, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.9, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.40, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.29, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.15, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.31, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.1.56, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.1.57, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.27, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.35, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.6, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.45, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.12, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.1.52, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.21, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.1.51, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.4, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.7, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.28, https://www.npmjs.com/package/@ikbal_fadilah_vanexa01/vanexa-agent/v/1.3.37

    Affected packages

    Package

    Name: @ikbal_fadilah_vanexa01/vanexa-agent

    Purl: pkg:npm/%40ikbal_fadilah_vanexa01/vanexa-agent

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.3.10
    1.3.19
    1.3.23
    1.3.17
    1.3.8
    1.3.34
    1.3.3
    1.3.14
    1.3.32
    1.3.44
    1.3.9
    1.3.40
    1.3.29
    1.3.15
    1.3.31
    1.3.27
    1.3.35
    1.3.6
    1.3.45
    1.3.12
    1.3.21
    1.3.4
    1.3.7
    1.3.28
    1.3.37
    MAL-2026-13364 | CVE-DB