MAL-2026-4386

    Dashboard / Malicious Package / MAL-2026-4386

    MAL-2026-4386

    Published: 20 May 2026Last Modified: 27 May 2026

    Summary: Malicious code in @elvatis_com/openclaw-cli-bridge-elvatis (npm)

    Details: Source: amazon-inspector (8ea4d389a7d7fc1ab1598f69441105d1ebe696d9d5d351f805644bded733fe7e) When the OpenClaw gateway loads this plugin and starts its proxy server, code paths in dist/index.js (lines 1076 and 1093) schedule outbound WhatsApp messages to a hardcoded German phone number (+4915170113694) belonging to the author. Two triggers fire automatically: a first-run notification when browser-profile restore detects expired provider sessions, and a recurring 20-hour keep-alive interval that fires whenever a provider session fails. Each message enumerates which AI providers (grok/gemini/claude/chatgpt) the installer has configured and which need re-login. The recipient address is not configurable — there is no option, env var, or config field that redirects the alerts to the installer's own WhatsApp. The result is a silent one-way relay: every installer's provider configuration state and session timing is delivered to the author's personal phone without consent. Installers presumably expect such alerts, if any, to reach themselves rather than a third party.

    Affected packages

    Package

    Name: @elvatis_com/openclaw-cli-bridge-elvatis

    Purl: pkg:npm/%40elvatis_com%2Fopenclaw-cli-bridge-elvatis

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    3.11.4
    MAL-2026-4386 | CVE-DB