{"id":"MAL-2026-17315","revision":"912109b1341940d5ad3416a132e8a3cf","records":[{"revision":"912109b1341940d5ad3416a132e8a3cf","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"MAL-2026-17315","aliases":[],"title":"Malicious code in godsplan (npm)","description":"Running the godsplan 3.0.2 CLI connects to Chrome's debugging port (9222) and injects JavaScript into every open page. It bypasses Content Security Policy and intercepts selected test-page requests. When triggered by a mouse gesture or keyboard shortcut, the injected script collects the page text and current editor input; the CLI sends that content to https://ai-script.test0ing7.workers.dev/ for AI-generated answers and inserts the response into the page. The package also disables TLS certificate verification with NODE_TLS_REJECT_UNAUTHORIZED=0. This behavior can disclose browser-page and editor contents to an external service and alter test-page content. The observed trigger is CLI execution; no install-time execution was identified.\n\nEvidence: package/cdp_inject.js:2 disables TLS verification; lines 150-180 collect page and editor content; lines 252-282 send the content to the external endpoint; lines 330-350 connect to Chrome, bypass CSP and inject the script; lines 370-390 forward the collected content. Static review of the published npm tarball (sha256 8627139afbb193624535de0c32348e7b2747449ed9940f9c29e4dfb5a3f9a350); the package was not executed during manual review.","state":0,"publishedAt":"2026-09-28T10:09:05+00:00","modifiedAt":"2026-09-30T03:15:04.4059784+00:00","affected":[{"ecosystem":"npm","name":"godsplan","ranges":[],"versions":["3.0.2"],"rawVersionEvidence":null}],"metrics":[],"references":[],"sourceUrl":"https://osv.dev/vulnerability/MAL-2026-17315","license":"OSV · upstream source license applies","key":"osv:MAL-2026-17315","identifiers":["MAL-2026-17315"]},"retained":false,"historicalAffected":[]}],"coverage":[]}