@greenlake/session

GHSA-ph7p-r8mj-5q6r

Malicious code in @greenlake/session (npm)

Details

**Severity:** Critical

**Affected versions:** `= 99.0.1`

## Source: amazon-inspector (3255cc4148a62c7ba090d1912d41c572f3ce7ccb6db9cc131132cfd4a0970f43)
The package is a scoped-namespace shim (version 99.0.1) whose main entry re-exports a Proxy returning no-op functions, allowing consumer builds to resolve this name without errors. On `npm install` (postinstall hook) and on `require('@greenlake/session')` (main-module side effect), beacon.cjs issues a plain-HTTP POST to the hardcoded bare-IP endpoint http://185.158.107.175:8787/_ah/dc carrying a JSON payload containing os.hostname(), __dirname (install path), process.cwd(), and process.version. The inflated version number, scoped name mimicking an internal namespace, Proxy no-op surface, and automatic beacon on both install and import together form a dependency-confusion exfiltration shape: any build that resolves @greenlake/session from the public registry instead of the intended private source leaks internal host identifiers and install locations to the hardcoded endpoint.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/b711d7c76f98b5044512e8c851547e8a05b2f959/osv/malicious/npm/@greenlake/session/MAL-2026-18283.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/b711d7c76f98b5044512e8c851547e8a05b2f959/osv/malicious/npm/@greenlake/session/MAL-2026-18283.json
- https://www.npmjs.com/package/@greenlake/session/v/99.0.1
- https://github.com/ossf/malicious-packages/blob/38576efe4884e97a0598f23da7c6da0343b22df4/osv/malicious/npm/@greenlake/session/MAL-2026-18283.json
- https://www.npmjs.com/package/@greenlake/session
- https://github.com/ossf/malicious-packages/blob/08e0f74bcc2cd2cc1e6e63ca1fce6f45f6e74e1b/osv/malicious/npm/@greenlake/session/MAL-2026-18283.json
- https://www.npmjs.com/package/@greenlake/session/v/1.0.0
- https://www.npmjs.com/package/@greenlake/session/v/2.0.0
- https://www.npmjs.com/package/@greenlake/session/v/3.0.0

Compromised versions (1)

= 99.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.