MAL-2026-18604: Malicious code in @signals-notebook/annotation-editor (npm)
Runs on install. The preinstall script sends the output of id (the installing user's identity and groups), base64-encoded, to a request-bin host with curl. This is the dependency-confusion probe pattern; it leaks data from every machine that installs the package. Version examined: 2.2.60-630109c; tarball SHA-256 023e55d33ea70625a746ab25627ea450718c9db722988bd233d370c1587db248.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to the data leak?
Any machine that installs the examined package version is exposed, because its preinstall script runs during installation and sends the installing user's identity and group information to a request-bin host.
What access does an attacker need to trigger the behavior?
The behavior is triggered by installing the package. No additional runtime use of the package is described.
What information is sent from an affected machine?
The script captures the output of `id`, which includes the installing user's identity and group memberships. It base64-encodes that output and transmits it using curl.
How can I identify the examined malicious artifact?
The examined version is 2.2.60-630109c. Its tarball SHA-256 is 023e55d33ea70625a746ab25627ea450718c9db722988bd233d370c1587db248.