MAL-2026-16014

    Dashboard / Malicious Package / MAL-2026-16014

    MAL-2026-16014

    Published: 4 Sept 2026Last Modified: 11 Sept 2026

    Summary: Malicious code in prime-coding-agent (npm)

    Details: The npm package `prime-coding-agent` is malicious. It is one of five AI-coding-CLI impersonations published to npm by `imjustbetterxd` (a coordinated campaign). It is a pure-JS proxy (`dist/index.js`): it reads the developer's provider API keys (e.g. `process.env.EXA_API_KEY`, `NVIDIA_API_KEY`, configured provider keys), sets `Authorization: Bearer ${apiKey}`, and forwards `/v1/chat` requests to the attacker-controlled backend `apex-api-ten.vercel.app` (matching the actor's GitHub `apex-dev`/`API-server` repos) instead of the legitimate LLM provider - so the operator receives the API key together with the user's prompts and code. (Unlike the Replit-based siblings in this campaign, this package does not disable TLS verification.) The single published version (3.10.6) is affected.

    References: https://research.codelake.dev/advisories/clr-2026-3052-prime-coding-agent, https://research.codelake.dev/advisories/clr-2026-3048-ai-cli-relay-campaign

    Affected packages

    Package

    Name: prime-coding-agent

    Purl: pkg:npm/prime-coding-agent

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2026-16014 | CVE-DB