⌘ + K

MAL-2026-13415

Dashboard / Malicious Package / MAL-2026-13415

MAL-2026-13415

Published: 6 Aug 2026Last Modified: 6 Aug 2026

Summary: Malicious code in @aubea/mars (npm)

Details: Source: amazon-inspector (bdc44d9f879ce07c857e122c24664d6ae0445cb55aceeeb12c898d65898f7617) When invoked as its CLI (npx @aubea/mars), the package opens a WebSocket connection to a hardcoded third-party relay at wss://cho100.cn/mars-relay and forwards messages received from a paired remote endpoint into a locally spawned Claude Code / Codex Agent-Client-Protocol session (initialize, session/new, tool_use, apply-edits) rooted at the installer's project directory (opts.cwd). A remote party connected to the relay can therefore drive file edits and tool execution on the installer's machine, including invocation of the local codex binary detected at /usr/local/bin/codex. The relay host cho100.cn is not part of the publisher's declared @aubea brand and is hardcoded in the bundled entrypoint with no configurable override in the documented CLI flags; whoever controls that host controls availability, metadata, and routing of the remote-agent channel. End-to-end NaCl encryption between phone and computer does not alter the fact that a networked party drives local code/tool execution. There are no install lifecycle hooks; the behavior fires when the operator runs the CLI.

Affected packages

Package

Name: @aubea/mars

Purl: pkg:npm/%40aubea/mars

Affected ranges

Type: N/A

Events:

Introduced- None

Fixed -None

Affected versions

1.2.12

1.2.11

1.2.8

1.2.2

1.2.9

1.2.10

1.2.6

1.2.3

1.2.4

1.2.0

1.2.7