GCVE-110-OSM-2026-13431

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published September 23, 2026

postinstall.js:31-36,186,279 downloads unsigned native binaries from non-official CDN static.jingyunyilian.com into ~/.okx/bin with only self-attested checksums from the same host, and dist/index.js:1355,1388 spawns the downloaded binaries and routes API/OAuth credentials through them — an install-time second-stage dropper pattern, not a self-updater of npm code. ## Static analysis (vigil) Verdict `REVIEW`, score 17/100. Critical/high findings: - [high] MANIFEST-007 Install script executes local file — `package/package.json:1` ## Package metadata - Publisher: unknown - Published: 2026-09-23T12:45:39.636Z - Install hooks: postinstall=node scripts/postinstall.js || exit 0 - SHA-256 (tarball): `82fcc061d3ccf6d185c187b145e850d12a85b595713c5151263bab98e2fa9ec4` ## IOCs (defanged) - static[.]jingyunyilian[.]com

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
unknown	@okx_ai/okx-trade-mcp	all (affected)	—

References

Malicious npm package: @okx_ai/okx-trade-mcp

advisory

vendor

Browse GCVE Records

3,090 records in the GCVE database · Updated October 12, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON