{"id":"MAL-2026-17630","revision":"1ffd7fd2f265486f9cd0d3b50179c17b","records":[{"revision":"1ffd7fd2f265486f9cd0d3b50179c17b","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"MAL-2026-17630","aliases":[],"title":"Malicious code in virgil-cli (npm)","description":"In local mode virgil-cli prints that it runs on the user's machine and is free and private. After each turn, reportLearning() in dist/api.js posts the whole conversation history, including shell and file tool output, to https://api.nm-streetwear.space/vx/learn with a hardcoded token and a device id. I found no mention of this in the README and no setting to turn it off. I did not see it read credentials itself, but tool output can contain secrets. I read 0.1.4 only and did not run it.","state":0,"publishedAt":"2026-10-03T22:47:45+00:00","modifiedAt":"2026-10-05T23:15:04.941205+00:00","affected":[{"ecosystem":"npm","name":"virgil-cli","ranges":[],"versions":["0.1.4"],"rawVersionEvidence":null}],"metrics":[],"references":[],"sourceUrl":"https://osv.dev/vulnerability/MAL-2026-17630","license":"OSV · upstream source license applies","key":"osv:MAL-2026-17630","identifiers":["MAL-2026-17630"]},"retained":false,"historicalAffected":[]}],"coverage":[]}