registry / Malware / @cortana-md/engine

@cortana-md/engine

This report shows the evidence for @cortana-md/engine@1.4.1. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

OpenSSF/OSV Malicious Advisory

imported 2mo ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-14553 confirms this npm version as malicious.

Advisory

MAL-2026-14553

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @cortana-md/engine (npm)

Details

The package was found to contain malicious code or consuming dependency that contains malicious code ## Source: ghsa-malware (12fd8bdc82a3afeda031c5aeb0f9c6d7c6ded66a5b10080c9d2fa1dc3819486b) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

References

OpenSSF/OSV advisory ADVISORY PACKAGE

Independent LPM AI assessment

Suspicious

Independent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.

The package has no install hook, but its manifest-reachable hosted runtime performs undisclosed account metadata reporting and unsolicited account mutation. The scanner's credential-exfiltration claim was not confirmed by the inspected source.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The consumer calls the exported hosted-bot start function and connects a WhatsApp account.

Impact

The remote service receives phone and paired-session metadata; the connected account gains unsolicited newsletter subscriptions.

Mechanism

Periodic remote heartbeat and automatic newsletter subscription.

AI rationale

Evidence

package.jsondist/hosted.cjs

Network endpoints2

cortana-web.onrender.com/api/internal/heartbeatcortana-web.onrender.com/api/internal/check-auth

Independent scan evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for AI warning decision

Starting the hosted bot sends its phone number and paired-session metadata to a remote service every minute.
A connected WhatsApp account is automatically made to follow package-defined newsletters.

Evidence against

No lifecycle install hooks are declared.
The inspected outbound request sends bot metadata, not credential files or process environment values.
The inspected shell use is for user-requested media conversion with FFmpeg.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 2.79 MB of source, external domains: api-inference.huggingface.co, api.adviceslip.com, api.alquran.cloud, api.dictionaryapi.dev, api.giftedtech.co.ke, api.github.com, api.ipify.org, api.jikan.moe, api.maher-zubair.tech, api.nekolabs.my.id, api.nekolabs.web.id, api.ocr.space, api.paste.ee, api.popcat.xyz, api.qrserver.com, api.quotable.io, api.ryzendesu.vip, api.safaricom.co.ke, api.vreden.my.id, api.waifu.pics, apkdownloader.vercel.app, beta.ourmanna.com, bible-api.com, carbonara.solopov.dev, catbox.moe, catfact.ninja, charlesapi.onrender.com, chat.whatsapp.com, chat.wrmgpt.com, cortana-web.onrender.com, cortana.world.briantechspace.co.ke, crashlogs.whatsapp.net, d.apkpure.com, dog-api.kinduff.com, dpaste.com, dub.sh, en.wikipedia.org, eversend.co, evilinsult.com, example.com, ezgif.com, fantox001-scrappy-api.vercel.app, files.catbox.moe, foreign-marna-sithaunarathnapromax-9a005c2e.koyeb.app, getstickerpack.com, git.io, github.com, google.com, graph.whatsapp.com, hacker-news.firebaseio.com

Source & flagged code

16 flagged

dist/hosted.cjsView file

789patternName = google_api_key severity = high line = 789 matchedText = Usage: ....ext!

High

High Secret

Package contains a high-severity secret pattern.

dist/hosted.cjsView on unpkg · L789

472\u{1F4DE} *+254113374182*`);if(e.length<2)return t(`\u274C Usage: .mpesa <phone> <amount> L473: Example: .mpesa 254712345678 1`);let r=e[0],s=e[1];await t(`\u{1F4B8} Initiating STK Push of KES ${s} to ${r}...`);let i=await rD();if(!i)return t("\u274C Failed to authenticate wi... L474:

High

Child Process

Package source references child process execution.

dist/hosted.cjsView on unpkg · L472

466L467: > Downloaded via Cortana MD Premium`,contextInfo:{externalAdReply:{title:l.title||c,body:"CORTANA MD | VIDEO DOWNLOADER",thumbnailUrl:l.thumbnail,mediaType:2,showAdAttribution:!1,s... L468: ... L472: \u{1F4DE} *+254113374182*`);if(e.length<2)return t(`\u274C Usage: .mpesa <phone> <amount> L473: Example: .mpesa 254712345678 1`);let r=e[0],s=e[1];await t(`\u{1F4B8} Initiating STK Push of KES ${s} to ${r}...`);let i=await rD();if(!i)return t("\u274C Failed to authenticate wi... L474:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/hosted.cjsView on unpkg · L466

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/hosted.cjs: `);go.write(W0.format.apply(W0,e))}}Object.defineProperty(tr.exports,"isWin",{get:function(){return gc},set:function(t){gc=t}});tr.exports.warnTo=function(t){var e=go;return go=t,e... Menu file not found. Contact EDUQARIZ.`}var Ec,wn,bx,xx,Sx=b(()=>{"use strict";me();Mt();Ec=ie(require("fs"),1),wn=ie(require("path"),1),bx=["https://files.catbox.moe/j7mg5d.jpg","... https://github.com/edu-qariz/Cortana_MD https://thecortana.tech https://t.me/cortanatech https://t.me/techdepro `).map(e=>e.trim()).join(" ")};yS.O=function(t){return this.inspectOpts.colors=this.useColors,Lc.inspect(t,this.inspectOpts)}});var bS=le((r6,Bp)=>{typeof process>"u"|

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/hosted.cjsView on unpkg

789patternName = google_api_key severity = high line = 789 matchedText = Usage: ....ext!

High

Secret Pattern

Google API key in dist/hosted.cjs

dist/hosted.cjsView on unpkg · L789

6) L7: `;await n.execute(T`CREATE SCHEMA IF NOT EXISTS ${T.identifier(i)}`),await n.execute(o);let c=(await n.all(T`select id, hash, created_at from ${T.identifier(i)}.${T.identifier(s)} ... L8: `);go.write(W0.format.apply(W0,e))}}Object.defineProperty(tr.exports,"isWin",{get:function(){return gc},set:function(t){gc=t}});tr.exports.warnTo=function(t){var e=go;return go=t,e...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/hosted.cjsView on unpkg · L6

410patternName = generic_password severity = medium line = 410 matchedText = _${c.des...T-4*

Medium

Secret Pattern

Hardcoded password in dist/hosted.cjs

dist/hosted.cjsView on unpkg · L410

1"use strict";var gM=Object.create;var da=Object.defineProperty;var yM=Object.getOwnPropertyDescriptor;var wM=Object.getOwnPropertyNames;var bM=Object.getPrototypeOf,xM=Object.proto... L2: CREATE TABLE IF NOT EXISTS ${T.identifier(i)}.${T.identifier(s)} ( ... L6: ) L7: `;await n.execute(T`CREATE SCHEMA IF NOT EXISTS ${T.identifier(i)}`),await n.execute(o);let c=(await n.all(T`select id, hash, created_at from ${T.identifier(i)}.${T.identifier(s)} ... L8: `);go.write(W0.format.apply(W0,e))}}Object.defineProperty(tr.exports,"isWin",{get:function(){return gc},set:function(t){gc=t}});tr.exports.warnTo=function(t){var e=go;return go=t,e... L9: ... L51: `):" "+yv(o[0]):"as no adapter specified";throw new W("There is no suitable adapter to dispatch the request "+a,"ERR_NOT_SUPPORT")}return s}v

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/hosted.cjsView on unpkg · L1

dist/index.cjsView file

1"use strict";var s8=Object.create;var yl=Object.defineProperty;var o8=Object.getOwnPropertyDescriptor;var c8=Object.getOwnPropertyNames;var u8=Object.getPrototypeOf,l8=Object.proto... L2: at `+t[n].toString();return e}function g8(t){if(!t)throw new TypeError("argument namespace is required");var e=wl(),n=ss(e[1]),r=n[0];function a(i){vl.call(a,i)}return a._file=r,a.... L3: `,"utf8")}}}function ss(t){var e=t.getFileName()||"<anonymous>",n=t.getLineNumber(),r=t.getColumnNumber();t.isEval()&&(e=t.getEvalOrigin()+", "+e);var a=[e,n,r];return a.callSite=t... L4: at `+n[i].toString();return a}return e&&(a+=" at "+xm(e)),a}function b8(t,e,n){var r="\x1B[36;1m"+this._namespace+"\x1B[22;39m \x1B[33;1mdeprecated\x1B[22;39m \x1B[0m"+t+"\x1B[39m"... L5: \x1B[36mat `+n[a].toString()+"\x1B[39m";retu

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.cjsView on unpkg · L1

1Trigger-reachable chain: scripts.start -> dist/index.cjs L1: "use strict";var s8=Object.create;var yl=Object.defineProperty;var o8=Object.getOwnPropertyDescriptor;var c8=Object.getOwnPropertyNames;var u8=Object.getPrototypeOf,l8=Object.proto... L2: at `+t[n].toString();return e}function g8(t){if(!t)throw new TypeError("argument namespace is required");var e=wl(),n=ss(e[1]),r=n[0];function a(i){vl.call(a,i)}return a._file=r,a.... L3: `,"utf8")}}}function ss(t){var e=t.getFileName()||"<anonymous>",n=t.getLineNumber(),r=t.getColumnNumber();t.isEval()&&(e=t.getEvalOrigin()+", "+e);var a=[e,n,r];return a.callSite=t... L4: at `+n[i].toString();return a}return e&&(a+=" at "+xm(e)),a}function b8(t,e,n){var r="\x1B[36;1m"+this._namespace+"\x1B[22;39m \x1B[33;1mdeprecated\x1B[22;39m \x1B[0m"+t+"\x1B

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg · L1

Source & flagged code

16 flagged · loading source

dist/hosted.cjsView file

789patternName = google_api_key severity = high line = 789 matchedText = Usage: ....ext!

High

High Secret

Package contains a high-severity secret pattern.

dist/hosted.cjsView on unpkg · L789

High

Child Process

Package source references child process execution.

dist/hosted.cjsView on unpkg · L472

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/hosted.cjsView on unpkg · L466

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/hosted.cjsView on unpkg

789patternName = google_api_key severity = high line = 789 matchedText = Usage: ....ext!

High

Secret Pattern

Google API key in dist/hosted.cjs

dist/hosted.cjsView on unpkg · L789

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/hosted.cjsView on unpkg · L6

410patternName = generic_password severity = medium line = 410 matchedText = _${c.des...T-4*

Medium

Secret Pattern

Hardcoded password in dist/hosted.cjs

dist/hosted.cjsView on unpkg · L410

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/hosted.cjsView on unpkg · L1

dist/index.cjsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.cjsView on unpkg · L1

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg · L1

4at `+n[i].toString();return a}return e&&(a+=" at "+xm(e)),a}function b8(t,e,n){var r="\x1B[36;1m"+this._namespace+"\x1B[22;39m \x1B[33;1mdeprecated\x1B[22;39m \x1B[0m"+t+"\x1B[39m"... L5: \x1B[36mat `+n[a].toString()+"\x1B[39m";return r}return e&&(r+=" \x1B[36m"+xm(e)+"\x1B[39m"),r}function xm(t){return p8(d8,t[0])+":"+t[1]+":"+t[2]}function wl(){var t=Error.stackTr... L6: return function (`+n+`) {log.call(deprecate, message, site)

High

Eval

Package source references dynamic code evaluation.

dist/index.cjsView on unpkg · L4

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.cjsView on unpkg · L1

1Trigger-reachable credential exfiltration chain: scripts.start -> dist/index.cjs L1: "use strict";var s8=Object.create;var yl=Object.defineProperty;var o8=Object.getOwnPropertyDescriptor;var c8=Object.getOwnPropertyNames;var u8=Object.getPrototypeOf,l8=Object.proto... L2: at `+t[n].toString();return e}function g8(t){if(!t)throw new TypeError("argument namespace is required");var e=wl(),n=ss(e[1]),r=n[0];function a(i){vl.call(a,i)}return a._file=r,a.... L3: `,"utf8")}}}function ss(t){var e=t.getFileName()||"<anonymous>",n=t.getLineNumber(),r=t.getColumnNumber();t.isEval()&&(e=t.getEvalOrigin()+", "+e);var a=[e,n,r];return a.callSite=t... L4: at `+n[i].toString();return a}return e&&(a+=" at "+xm(e)),a}function b8(t,e,n){var r="\x1B[36;1m"+this._namespace+"\x1B[22;39m \x1B[33;1mdeprecated\x1B

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.cjsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.cjs L1: "use strict";var s8=Object.create;var yl=Object.defineProperty;var o8=Object.getOwnPropertyDescriptor;var c8=Object.getOwnPropertyNames;var u8=Object.getPrototypeOf,l8=Object.proto... L2: at `+t[n].toString();return e}function g8(t){if(!t)throw new TypeError("argument namespace is required");var e=wl(),n=ss(e[1]),r=n[0];function a(i){vl.call(a,i)}return a._file=r,a.... L3: `,"utf8")}}}function ss(t){var e=t.getFileName()||"<anonymous>",n=t.getLineNumber(),r=t.getColumnNumber();t.isEval()&&(e=t.getEvalOrigin()+", "+e);var a=[e,n,r];return a.callSite=t... L4: at `+n[i].toString();return a}return e&&(a+=" at "+xm(e)),a}function b8(t,e,n){var r="\x1B[36;1m"+this._namespace+"\x1B[22;39m \x1B[33;1mdeprecated

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.cjsView on unpkg · L1

781patternName = google_api_key severity = high line = 781 matchedText = Usage: ....ext!

High

Secret Pattern

Google API key in dist/index.cjs

dist/index.cjsView on unpkg · L781

402patternName = generic_password severity = medium line = 402 matchedText = _${c.des...T-4*

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L402

Findings

2 Critical10 High6 Medium5 Low

CriticalCredential Exfiltrationdist/index.cjs

CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs

HighHigh Secretdist/hosted.cjs

HighChild Processdist/hosted.cjs

HighEvaldist/index.cjs

HighSame File Env Network Executiondist/hosted.cjs

HighEntrypoint Foreign Package Code Overwritedist/hosted.cjs

HighCommand Output Exfiltrationdist/index.cjs

HighTrigger Reachable Credential Exfiltrationdist/index.cjs

HighTrigger Reachable Command Output Exfiltrationdist/index.cjs

HighSecret Patterndist/hosted.cjs

HighSecret Patterndist/index.cjs

MediumDynamic Requiredist/hosted.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/hosted.cjs

MediumSecret Patterndist/index.cjs

LowScripts Present

LowWeak Cryptodist/hosted.cjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @cortana-md/engine@1.4.1.

The versions list below shows the verdict for each recorded version.

Avoid installing @cortana-md/engine@1.4.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-04 05:50:05.900Z (UTC).

Source advisory published: 2026-08-27 06:26:19.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.0.1-securitylatestClean—AllowPublishedAug 27, 2026, 6:25 AM 1.4.1shownMaliciousMalwareBlockPublishedAug 26, 2026, 11:25 PM

OpenSSF/OSV Malicious Advisory

Independent LPM AI assessment

Independent scan evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Related packages

Other malware packages

Source & flagged code