cma-self-hosted-sandbox-cf

Details

**Severity:** Critical

**Affected versions:** `= 1.0.0`

## Source: amazon-inspector (d91a7568b717361d5b3727d46e8bf567fc038f95c5fa22c5222a272460bb9f35)
package.json declares a preinstall hook that runs index.js on npm install. index.js collects the machine's hostname, current user info, home directory, configured DNS servers, and the contents of /etc/passwd and /etc/hosts, then HTTPS POSTs the JSON payload to the hardcoded Burp Collaborator subdomain 49bl3t5yt786ymbtth24nnlbs2ytmka9.oastify.com. The behavior fires automatically on install with no user interaction, the destination is an attacker-controlled out-of-band interaction host unrelated to any legitimate package function, and the collected data comprises installer-side system identifiers and local account/host files. This is a dependency-confusion/recon exfiltration payload with no other functionality present in the package.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/673f2310ffc87df8cd80340bf43293eed5837dac/osv/malicious/npm/cma-self-hosted-sandbox-cf/MAL-2026-17190.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/673f2310ffc87df8cd80340bf43293eed5837dac/osv/malicious/npm/cma-self-hosted-sandbox-cf/MAL-2026-17190.json
- https://www.npmjs.com/package/cma-self-hosted-sandbox-cf/v/1.0.0
- https://github.com/advisories/GHSA-wjmh-pc3x-575f

Compromised versions (1)

• = 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.