OpenSSF/OSV advisory MAL-2026-10721 confirms this npm version as malicious. The package ships as an agent daemon whose bundled entry (dist/index.cjs, dist/core.cjs) connects to a hardcoded WebSocket gateway at wss://memory.whalent.com/gw/sdk/ws and executes commands received from the remote side. Handled remote commands include 'upgrade' (triggers a global npm install via a bundled install command), 'restart', and PTY/SSH tunnel primitives ('ssh.tunnel.open', 'proxy.open', 'preview.open')...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @whalent/agent (npm)
Details
The package ships as an agent daemon whose bundled entry (dist/index.cjs, dist/core.cjs) connects to a hardcoded WebSocket gateway at wss://memory.whalent.com/gw/sdk/ws and executes commands received from the remote side. Handled remote commands include 'upgrade' (triggers a global npm install via a bundled install command), 'restart', and PTY/SSH tunnel primitives ('ssh.tunnel.open', 'proxy.open', 'preview.open') using bundled node-pty. Whoever controls the gateway can drive package upgrades, process restarts, interactive shells, and SSH/proxy tunnels on the host running the daemon. Both bundles are shipped through javascript-obfuscator (hex identifiers, rotating string array, control-flow flattening), so the actual set of remote-authorized operations is not auditable from the published sources.
Decision reason
OpenSSF Malicious Packages via OSV confirms @whalent/agent@0.3.231 as malicious (MAL-2026-10721): Malicious code in @whalent/agent (npm)