{"dataType":"CVE_RECORD","dataVersion":"1.0","cveMetadata":{"cveId":"GCVE-110-OSM-2026-14394","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-11-02T07:27:04Z","dateUpdated":"2026-11-02T12:11:04Z","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"en","value":"Import-triggered npm supply-chain package implementing credential theft, cloud-account abuse, repository propagation, persistence, blockchain-based task retrieval, and execution of remotely supplied JavaScript. The code has high-risk capabilities, while its embedded private/loopback relay configuration and explicit simulation markers leave operational campaign status unconfirmed.\n\nMalicious payload found in: personas.mjs -\u003e cache-warm.mjs, with additional stages in build-cache.mjs, workspaces.js, cache-sweep.mjs, and platform-specific native cache-probe.node modules. A normal package import reaches an XOR/Base64-obfuscated loader without requiring an npm lifecycle hook. The stages search environment variables, cloud and developer configuration, Git remotes, SSH material, private keys, browser/login files, and source workspaces. Discovered AWS credentials can be used with STS, IAM, Bedrock, and invoicing APIs. Persistence and propagation paths create detached Node processes, cron reboot entries, PATH/node/curl shims, modify sibling repositories, amend commits, force-push, expire reflogs, and run garbage collection. Blockchain tasking reads encrypted JavaScript from TRON transaction data, account transaction arguments, and EVM/BSC transaction input, then XOR-decodes and executes it through eval and a detached Node process. A recent-block branch interprets recipient-address bytes as relay IPs, ports, and routing data, consistent with NullReceiver, while transaction-data payload retrieval is EtherHiding-like. Six native modules perform VM, container, and sandbox checks. The embedded relays are private or loopback and the source contains explicit lab/simulation markers, so live infrastructure and attribution are unresolved.","supportingMedia":null}],"references":[{"url":"https://opensourcemalware.com/threats/39a40171-e558-4cb0-8535-2a6e75699800","name":"Malicious npm package: tavern-ai-sdk","tags":["advisory"]},{"url":"https://registry.npmjs.org/tavern-ai-sdk","name":"","tags":["vendor"]}],"metrics":[{"format":"CVSS_V3","scenarios":null,"cvssV2_0":null,"cvssV3_0":null,"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH"},"cvssV4_0":null,"other":null}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Embedded Malicious Code","cweId":"CWE-506","type":"CWE"}]}],"affected":[{"vendor":"unknown","product":"tavern-ai-sdk","collectionURL":"https://registry.npmjs.org","packageName":"tavern-ai-sdk","repo":"","defaultStatus":"affected","versions":[{"version":"all","status":"affected","versionType":"","lessThan":"","lessThanOrEqual":"","changes":null}],"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null},"adp":null}}