Vulnerability-Lookup

MAL-2026-13419

Vulnerability from ossf_malicious_packages

Published

2026-08-06 14:18

Modified

2026-08-06 15:21

Summary

Malicious code in @holocronlab/botruntime-runtime (npm)

Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (ad15bd6ba410e0c0ca88ac22f1632a4b6707c4c66396c49c0ba90f906b19ae33)

The package is published as a runtime for 'brt-built botruntime agents' and its client.d.ts describes the exported client as 'the authenticated Botpress client'. Bundled entrypoints (dist/library.js, dist/definition.js, dist/runtime.js, dist/internal.js) read the standard Botpress SDK environment variables — process.env.BP_TOKEN / ADK_TOKEN / ADK_BOT_ID / ADK_WORKSPACE_ID — and construct new Client({ token: process.env.BP_TOKEN?? process.env.ADK_TOKEN, apiUrl: process.env.ADK_API_URL?? "https://botruntime.ru" }). The real Botpress SDK defaults to api.botpress.cloud; here the default is swapped to https://botruntime.ru, a domain unrelated to Botpress. Source maps in the shipped bundle reference github.com/botpress/botpress and github.com/botpress/skynet, and the package's entire dependency tree is a family of @holocronlab/botruntime- shadow packages (sdk, client, chat, cognitive, evals, llmz, zai, zui, thicktoken, const) mirroring real @botpress/ packages. A developer who installs this expecting a Botpress-compatible runtime and populates BP_TOKEN with their real Botpress personal access token has that live third-party credential and all associated API traffic silently directed to botruntime.ru whenever ADK_API_URL is unset.

CWE

CWE-506 - The product contains code that appears to be malicious in nature.
CWE-506 - The product contains code that appears to be malicious in nature.
CWE-506 - The product contains code that appears to be malicious in nature.
CWE-506 - The product contains code that appears to be malicious in nature.
CWE-506 - The product contains code that appears to be malicious in nature.
CWE-506 - The product contains code that appears to be malicious in nature.
CWE-506 - The product contains code that appears to be malicious in nature.
CWE-506 - The product contains code that appears to be malicious in nature.
CWE-506 - The product contains code that appears to be malicious in nature.
CWE-506 - The product contains code that appears to be malicious in nature.
CWE-506 - The product contains code that appears to be malicious in nature.

Credits

Amazon Inspector inspector-research@amazon.com

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cwes": [
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          }
        ],
        "indicators": {
          "evidence_files": [
            {
              "path": "dist/library.js",
              "sha256": "4b7c09a7c0d888891d1b7b176665d5e86a4005ba96fdb89764860023ff70c068",
              "tlsh": "12a4b61a29f71022096370a55f6fa001b631a0073a49dd64bf9c43a85fc992dd7fbbed"
            },
            {
              "path": "dist/runtime/client.d.ts",
              "sha256": "2c62ec9aa864e6aaaf003f10017b5895a4607e3edcd5a04ed2711dae6179c010",
              "tlsh": "b7116a61764422b3c2a712639aaea4e10332d6197a8334287dde06bc1e9409bc79bfc5"
            }
          ],
          "package_integrity": [
            {
              "filename": "botruntime-runtime-2.2.5.tgz",
              "hashes": {
                "sha1": "47aaba1c373013ea2e73f897ffb792b4626b54ef",
                "sha512_sri": "sha512-XcK5mCKCejJ+RmH0RrHBRrQvFd3vBq6VsiJ8KM77n8kSlAqhiGcW+NVWCMkl89Wou1j4813nB57y4f2rTurt3w=="
              }
            }
          ]
        }
      },
      "package": {
        "ecosystem": "npm",
        "name": "@holocronlab/botruntime-runtime"
      },
      "versions": [
        "2.2.5",
        "2.9.7",
        "2.2.7",
        "2.6.1",
        "2.5.4",
        "2.4.2",
        "2.5.0",
        "2.1.15",
        "2.6.0",
        "2.6.3",
        "2.6.4"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "inspector-research@amazon.com"
      ],
      "name": "Amazon Inspector",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "IN-MAL-2026-016596",
        "import_time": "2026-08-06T14:19:56.649816119Z",
        "modified_time": "2026-08-06T14:19:14Z",
        "sha256": "0e2d9a10ec400f64f0c1a112a8dd1631c3db8765c6598fa2b9a1cff6f8d4ee24",
        "source": "amazon-inspector",
        "versions": [
          "2.2.5"
        ]
      },
      {
        "id": "IN-MAL-2026-016597",
        "import_time": "2026-08-06T14:19:56.680666694Z",
        "modified_time": "2026-08-06T14:19:21Z",
        "sha256": "d408528f7556bc157dc3e04d19850432f1c34d661e1b9d5f7aabdb165d1fa37a",
        "source": "amazon-inspector",
        "versions": [
          "2.9.7"
        ]
      },
      {
        "id": "IN-MAL-2026-016598",
        "import_time": "2026-08-06T14:19:56.706366669Z",
        "modified_time": "2026-08-06T14:19:31Z",
        "sha256": "f66cf12c9c593719a380fcfd6bc3fa356b2fcd3e986c8bdd76faee8387cc9899",
        "source": "amazon-inspector",
        "versions": [
          "2.2.7"
        ]
      },
      {
        "id": "IN-MAL-2026-016590",
        "import_time": "2026-08-06T14:19:56.434867531Z",
        "modified_time": "2026-08-06T14:18:29Z",
        "sha256": "45ecc6b6d65999d0c272e7aec8f2af28ba768bda6b8fb0c5f7472640ef77c18e",
        "source": "amazon-inspector",
        "versions": [
          "2.6.1"
        ]
      },
      {
        "id": "IN-MAL-2026-016595",
        "import_time": "2026-08-06T14:19:56.62566544Z",
        "modified_time": "2026-08-06T14:19:07Z",
        "sha256": "69574d32165fd7bc23a4edeb941f15c50b61fcb13e1e7a87dab3009ce0b7ee57",
        "source": "amazon-inspector",
        "versions": [
          "2.5.4"
        ]
      },
      {
        "id": "IN-MAL-2026-016593",
        "import_time": "2026-08-06T14:19:56.573016209Z",
        "modified_time": "2026-08-06T14:18:52Z",
        "sha256": "76ca575694c8088ffc320b83bc1408a1aa67b7ed4f88287053ef6ab0423dd518",
        "source": "amazon-inspector",
        "versions": [
          "2.4.2"
        ]
      },
      {
        "id": "IN-MAL-2026-016591",
        "import_time": "2026-08-06T14:19:56.498557403Z",
        "modified_time": "2026-08-06T14:18:36Z",
        "sha256": "872531f86f7684cb50b8669943244ec568d9cd758732d57580017e1a9e87d1e0",
        "source": "amazon-inspector",
        "versions": [
          "2.5.0"
        ]
      },
      {
        "id": "IN-MAL-2026-016592",
        "import_time": "2026-08-06T14:19:56.526788756Z",
        "modified_time": "2026-08-06T14:18:44Z",
        "sha256": "8d8d7b3af2c1917fe55a200d67cccf2ca326f3f0a4e194b395d810df6e63dd75",
        "source": "amazon-inspector",
        "versions": [
          "2.1.15"
        ]
      },
      {
        "id": "IN-MAL-2026-016594",
        "import_time": "2026-08-06T14:19:56.60116144Z",
        "modified_time": "2026-08-06T14:19:00Z",
        "sha256": "ad15bd6ba410e0c0ca88ac22f1632a4b6707c4c66396c49c0ba90f906b19ae33",
        "source": "amazon-inspector",
        "versions": [
          "2.6.0"
        ]
      },
      {
        "id": "IN-MAL-2026-016600",
        "import_time": "2026-08-06T15:19:32.220631424Z",
        "modified_time": "2026-08-06T14:19:47Z",
        "sha256": "1d9e858ba81f4f3a2a25d0026958788920c6eb9ec0e0ae1be3b768e7e137a36b",
        "source": "amazon-inspector",
        "versions": [
          "2.6.3"
        ]
      },
      {
        "id": "IN-MAL-2026-016599",
        "import_time": "2026-08-06T15:19:32.184952754Z",
        "modified_time": "2026-08-06T14:19:40Z",
        "sha256": "bada5f0632e5c7432fcc10689a1a6471203761758b22b93b354ad2381ff732af",
        "source": "amazon-inspector",
        "versions": [
          "2.6.4"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (ad15bd6ba410e0c0ca88ac22f1632a4b6707c4c66396c49c0ba90f906b19ae33)\nThe package is published as a runtime for \u0027brt-built botruntime agents\u0027 and its client.d.ts describes the exported `client` as \u0027the authenticated Botpress client\u0027. Bundled entrypoints (dist/library.js, dist/definition.js, dist/runtime.js, dist/internal.js) read the standard Botpress SDK environment variables \u2014 process.env.BP_TOKEN / ADK_TOKEN / ADK_BOT_ID / ADK_WORKSPACE_ID \u2014 and construct `new Client({ token: process.env.BP_TOKEN?? process.env.ADK_TOKEN, apiUrl: process.env.ADK_API_URL?? \"https://botruntime.ru\" })`. The real Botpress SDK defaults to api.botpress.cloud; here the default is swapped to https://botruntime.ru, a domain unrelated to Botpress. Source maps in the shipped bundle reference github.com/botpress/botpress and github.com/botpress/skynet, and the package\u0027s entire dependency tree is a family of @holocronlab/botruntime-* shadow packages (sdk, client, chat, cognitive, evals, llmz, zai, zui, thicktoken, const) mirroring real @botpress/* packages. A developer who installs this expecting a Botpress-compatible runtime and populates BP_TOKEN with their real Botpress personal access token has that live third-party credential and all associated API traffic silently directed to botruntime.ru whenever ADK_API_URL is unset.\n",
  "id": "MAL-2026-13419",
  "modified": "2026-08-06T15:21:39.660274932Z",
  "published": "2026-08-06T14:18:29Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.2.5"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.9.7"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.2.7"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.6.1"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.5.4"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.4.2"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.5.0"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.1.15"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.6.0"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.6.3"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@holocronlab/botruntime-runtime/v/2.6.4"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in @holocronlab/botruntime-runtime (npm)"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

MAL-2026-13419

Vulnerability from ossf_malicious_packages

Source: amazon-inspector (ad15bd6ba410e0c0ca88ac22f1632a4b6707c4c66396c49c0ba90f906b19ae33)

Tags

Sightings

Nomenclature