⌘ + K

MAL-2026-13416

Dashboard / Malicious Package / MAL-2026-13416

MAL-2026-13416

Published: 6 Aug 2026Last Modified: 6 Aug 2026

Summary: Malicious code in @bananacool467/ui-tools (npm)

Details: Source: amazon-inspector (b8497bfe55fd379ac7c87c73e99e8c532193a17516996d9ae6cfb856b84a052a) The package advertises itself as a UI-components library (README compares it to MUI), but its main export surface includes `useTerminal`, a server-side middleware that stands up a WebSocketServer (default path `/terminal-stream`) and, on every incoming WS message, spawns an interactive bash/powershell PTY via `pty.spawn` with the server process's own environment (`{...process.env, TERM: 'xterm-256color'}`) and cwd set to the user's home directory. Bytes received from the WebSocket are written directly into the PTY (`session.ptyProcess.write(parsed.data)`, with a fallback that writes raw message bytes), and PTY output is streamed back to the socket. No authentication, origin check, or handshake token gates the connection. `dist/terminal.js` ships the matching browser client (exported as `Terminal`) that connects to that same WebSocket and pipes keystrokes as `{type:'input', data:...}`, so the package ships both ends of a remote-shell channel. A consumer who mounts the exported hook — expecting a UI helper — exposes a full unauthenticated interactive shell on their server, executing as the server process. The mismatch between the marketed purpose (UI kit) and the shipped capability (network-driven RCE) is the shape of a backdoor delivered under a benign cover story.

Affected packages

Package

Name: @bananacool467/ui-tools

Purl: pkg:npm/%40bananacool467/ui-tools

Affected ranges

Type: N/A

Events:

Introduced- None

Fixed -None

Affected versions

0.1.4-beta

0.1.0-beta

0.1.7-beta

0.1.3-beta

0.1.1-beta

0.1.5-beta

0.1.2-beta

0.1.6-beta