Malicious code in opencode-skills-collection (npm)

Exploitation

No confirmed exploitation recorded. Patch Next marks exploitation only from CISA KEV.

CVSS

not scored

EPSS

No dated EPSS signal available.

As published by the source; long descriptions are shortened.

--- _-= Per source details. Do not edit below this line.=-_

Source: amazon-inspector (ad4663af5b87079e1a7cdbfd6f3626801e542f7fdfe79316dec31974dd625941) Package bundles a collection of skill directories containing various helper scripts. Static pattern matches fired on routine network primitives: a Python scraper (bundled-skills/junta-leiloeiros/scripts/base_scraper.py) and an API server script (serve_api.py) that reference `ping`/GET/POST, a benchmark harness (bundled-skills/loki-mode/benchmarks/run-benchmarks.sh), an rclone install helper (bundled-skills/rclone-cli/scripts/install.sh) that runs `curl https://rclone.org` to fetch the rclone installer from its official project domain, and a youtube-notetaker verification script using `curl` against GET endpoints. Matches reflect keyword co-occurrence (curl/ping/GET/POST) in utility scripts rather than exfiltration shapes: no hardcoded attacker C2, no reads of installer-side secret paths (~/.aws, ~/.ssh, ~/.npmrc), no environment…

Published by the source

22 Oct 2026, 18:35 UTC

Last modified by the source

3 Nov 2026, 07:31 UTC

Source last checked

4 Nov 2026, 06:10 UTC

1. Revision 4 · amended · 4 Nov 2026

   Amended from osv record MAL-2026-18193

2. Revision 3 · amended · 3 Nov 2026

   Amended from osv record MAL-2026-18193

3. Revision 2 · amended · 31 Oct 2026

   Amended from osv record MAL-2026-18193

4. Revision 1 · created · 30 Oct 2026

   Published from osv record MAL-2026-18193

Preview the exact text before you copy it. Commands are read-only suggestions; review them before running anything.

# Patch Next advisory brief: GHSA-9855-prwc-mfp2

Advisory: Malicious code in opencode-skills-collection (npm)
IDs: GHSA-9855-prwc-mfp2
Record: https://patchnext.com/advisories/mal-2026-18193 (revision 4, source checked 4 Nov 2026, 06:10 UTC)
Inventory: none attached. This brief comes from a public page and does not say whether any deployment is affected.
Severity: Unrated
Exploitation: no confirmed exploitation recorded. Patch Next confirms exploitation only from CISA KEV.
Vendor response: Vendor response not established. A vendor fix does not mean a deployment is fixed.

## Affected components
- npm opencode-skills-collection: affected >= 4.1.10, <= 4.1.10; >= 4.0.57, <= 4.0.57; >= 4.1.11, <= 4.1.11; >= 4.1.16, <= 4.1.16; >= 4.1.13, <= 4.1.13; >= 4.1.6, <= 4.1.6; >= 4.1.3, <= 4.1.3; >= 4.1.4, <= 4.1.4; >= 4.1.1, <= 4.1.1; >= 4.1.8, <= 4.1.8; >= 4.1.7, <= 4.1.7; >= 4.1.17, <= 4.1.17; >= 4.1.14, <= 4.1.14; >= 4.1.19, <= 4.1.19; >= 4.1.12, <= 4.1.12; >= 4.0.56, <= 4.0.56; >= 4.1.0, <= 4.1.0; >= 4.0.77, <= 4.0.77; >= 4.1.9, <= 4.1.9; >= 4.1.18, <= 4.1.18; >= 4.1.20, <= 4.1.20; >= 4.1.2, <= 4.1.2; >= 4.1.5, <= 4.1.5; >= 4.1.31, <= 4.1.31; >= 4.1.32, <= 4.1.32; >= 4.1.30, <= 4.1.30; >= 4.1.33, <= 4.1.33; >= 4.1.22, <= 4.1.22; >= 4.1.29, <= 4.1.29

## Suggested inspection (read-only)
- `npm ls opencode-skills-collection --all`: lists every installed copy and version, including transitive ones. Run in the project root after `npm ci`.

## Supported action
No complete vendor fix is recorded. Follow the primary source's mitigation guidance and check this record again before closing anything.

## Required regression checks
- Run the test suite and a production build.
- Exercise the features that depend on opencode-skills-collection.
- Repeat the inspection and confirm that only fixed versions remain installed.

## Rollback considerations
- Keep the previous lockfile and deployment artifact. Rolling back reinstates the vulnerable version, so apply any documented mitigation while you fix forward.

## Unresolved questions
- Which deployments run an affected version?
- Exploitation status can change. Check again before lowering the priority.
- Mark the work resolved only after the fixed version is verified in production.

## Sources
- Verified: https://osv.dev/vulnerability/MAL-2026-18193 (OSV record MAL-2026-18193 lists affected ranges: npm opencode-skills-collection >=4.1.10 =4.0.57 =4.1.11 =4.1.16 =4.1.13 =4.1.6 =4.1.3 =4.1.4 =4.1.1 =4.1.8 =4.1.7 =4.1.17 =4.1.14 =4.1.19 =4.1.12 =4.0.56 =4.1.0 =4.0.77 =4.1.9 =4.1.18 =4.1.20 =4.1.2 =4.1.5 <=4.1.5)
- Verified: https://osv.dev/vulnerability/MAL-2026-18193 (OSV record MAL-2026-18193 lists affected ranges: npm opencode-skills-collection >=4.1.10 =4.0.57 =4.1.11 =4.1.16 =4.1.13 =4.1.6 =4.1.3 =4.1.4 =4.1.1 =4.1.8 =4.1.7 =4.1.17 =4.1.14 =4.1.19 =4.1.12 =4.0.56 =4.1.0 =4.0.77 =4.1.9 =4.1.18 =4.1.20 =4.1.2 =4.1.5 <=4.1.5,…)

Commands are suggestions: review each one before running it.