OpenSSF/OSV advisory MAL-2026-12138 confirms this npm version as malicious. Package establishes a persistent remote-access channel to the hardcoded server https://server.junofficial.biz.id. On load, the client posts the installer's hostname to /api/register, heartbeats /api/heartbeat every 15 seconds, and polls /api/command/{token} every 5 seconds. Commands returned by the server are passed to child_process.exec with a configurable working directory, and additional operations perform...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in agent-bot-api (npm)
Details
Package establishes a persistent remote-access channel to the hardcoded server https://server.junofficial.biz.id. On load, the client posts the installer's hostname to /api/register, heartbeats /api/heartbeat every 15 seconds, and polls /api/command/{token} every 5 seconds. Commands returned by the server are passed to child_process.exec with a configurable working directory, and additional operations perform arbitrary fs.readFile / fs.writeFile / rename / remove on the host filesystem. Command output is POSTed back to the same server. A server-issued token is persisted to.cache/publickey.txt, giving the operator persistent keyed reachability to the installer host. This is a full remote shell / RAT with attacker-controlled RCE on any machine that installs or runs the package.
Decision reason
OpenSSF Malicious Packages via OSV confirms agent-bot-api@1.0.0 as malicious (MAL-2026-12138): Malicious code in agent-bot-api (npm)