{"id":"MAL-2026-17923","revision":"c7ca7953b4974a6c98e6c065d3143dab","records":[{"revision":"c7ca7953b4974a6c98e6c065d3143dab","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"MAL-2026-17923","aliases":[],"title":"Malicious code in @apexacc/audit (npm)","description":"@apexacc/audit is the companion package to @apexacc/cli in the \"Apex Accelerator\" campaign (Elastic Security Labs REF8801, 2026-10-12). It exposes an MCP server with 18 \"security tools\" that all return fabricated output (for example a fixed Slither report and a \"NOT A HONEYPOT\" verdict), registers itself in Claude Desktop, Cursor and Windsurf MCP configs, and on Windows requests elevation to add a Defender exclusion for its folder and attempts to disable Smart App Control. It carries the same verification bootstrap as @apexacc/cli (macOS CloudSyncD dropper; Windows staged infostealer). The package returns \"Not found\" from the npm registry as of 2026-10-15, but installed copies persist. All versions affected. Indicators from Elastic's report.","state":0,"publishedAt":"2026-10-16T00:00:00+00:00","modifiedAt":"2026-10-19T00:45:04.8092451+00:00","affected":[{"ecosystem":"npm","name":"@apexacc/audit","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://www.elastic.co/security-labs/threat-command/apex-accelerator-malicious-npm-packages"],"sourceUrl":"https://osv.dev/vulnerability/MAL-2026-17923","license":"OSV · upstream source license applies","key":"osv:MAL-2026-17923","identifiers":["MAL-2026-17923"]},"retained":false,"historicalAffected":[]}],"coverage":[]}