Snyk Security Database

agentgui is a malicious package. This package has been compromised as part of a malicious supply-chain attack linked to North Korean threat actors (Contagious Interview campaign / Lazarus APT group). The legitimate package was hijacked, with intact functionality maintained to evade early detection. A malicious loader was hidden directly inside the existing database.js file.

kb-ai is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship.

Affected versions of this package are vulnerable to Sensitive Cookie with Improper SameSite Attribute through the server default configuration and OAuth2/OIDC consent flow in serverdefaults.properties, ConsentRequiredResource, and CsrfProtection. An attacker can steal or abuse an authenticated console user’s session by exploiting a script-readable SSO cookie during same-origin XSS or by driving consent requests that rely on the cookie-derived CSRF value. The vulnerable code ships the session cookie with HttpOnly=false and reuses the iPlanetDirectoryPro token as the csrf value in OAuth/OIDC consent pages, so browser scripts can read the session identifier and the consent flow accepts it as the anti-CSRF token. This enables session theft and attacker-controlled OAuth consent grants, breaking the user’s OpenAM session and exposing account access and authorization decisions.