@cortana-md/engine
This report shows the evidence for @cortana-md/engine@1.4.1. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
OpenSSF/OSV Malicious Advisory
imported 2mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-14553 confirms this npm version as malicious.
Advisory
MAL-2026-14553
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @cortana-md/engine (npm)
Details
The package was found to contain malicious code or consuming dependency that contains malicious code
## Source: ghsa-malware (12fd8bdc82a3afeda031c5aeb0f9c6d7c6ded66a5b10080c9d2fa1dc3819486b) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.
References
Independent LPM AI assessment
SuspiciousIndependent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.
The package has no install hook, but its manifest-reachable hosted runtime performs undisclosed account metadata reporting and unsolicited account mutation. The scanner's credential-exfiltration claim was not confirmed by the inspected source.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The consumer calls the exported hosted-bot start function and connects a WhatsApp account.
Impact
The remote service receives phone and paired-session metadata; the connected account gains unsolicited newsletter subscriptions.
Mechanism
Periodic remote heartbeat and automatic newsletter subscription.
AI rationale
The package has no install hook, but its manifest-reachable hosted runtime performs undisclosed account metadata reporting and unsolicited account mutation. The scanner's credential-exfiltration claim was not confirmed by the inspected source.
Evidence
package.jsondist/hosted.cjs
Network endpoints2
cortana-web.onrender.com/api/internal/heartbeatcortana-web.onrender.com/api/internal/check-auth
Independent scan evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for AI warning decision
- Starting the hosted bot sends its phone number and paired-session metadata to a remote service every minute.
- A connected WhatsApp account is automatically made to follow package-defined newsletters.
Evidence against
- No lifecycle install hooks are declared.
- The inspected outbound request sends bot metadata, not credential files or process environment values.
- The inspected shell use is for user-requested media conversion with FFmpeg.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
16 flagged · loading sourcedist/hosted.cjsView file
789patternName = google_api_key
severity = high
line = 789
matchedText = Usage: ....ext!
High
472\u{1F4DE} *+254113374182*`);if(e.length<2)return t(`\u274C Usage: .mpesa <phone> <amount>
L473: Example: .mpesa 254712345678 1`);let r=e[0],s=e[1];await t(`\u{1F4B8} Initiating STK Push of KES ${s} to ${r}...`);let i=await rD();if(!i)return t("\u274C Failed to authenticate wi...
L474:
High
466L467: > Downloaded via Cortana MD Premium`,contextInfo:{externalAdReply:{title:l.title||c,body:"CORTANA MD | VIDEO DOWNLOADER",thumbnailUrl:l.thumbnail,mediaType:2,showAdAttribution:!1,s...
L468:
...
L472: \u{1F4DE} *+254113374182*`);if(e.length<2)return t(`\u274C Usage: .mpesa <phone> <amount>
L473: Example: .mpesa 254712345678 1`);let r=e[0],s=e[1];await t(`\u{1F4B8} Initiating STK Push of KES ${s} to ${r}...`);let i=await rD();if(!i)return t("\u274C Failed to authenticate wi...
L474:
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
2 Critical10 High6 Medium5 Low
CriticalCredential Exfiltrationdist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
HighHigh Secretdist/hosted.cjs
HighChild Processdist/hosted.cjs
HighEvaldist/index.cjs
HighSame File Env Network Executiondist/hosted.cjs
HighEntrypoint Foreign Package Code Overwritedist/hosted.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/index.cjs
HighSecret Patterndist/hosted.cjs
HighSecret Pattern
Affected versions and remediation
This report applies to @cortana-md/engine@1.4.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing @cortana-md/engine@1.4.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.