{
  "affected": [
    {
      "database_specific": {
        "cwes": [
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          }
        ],
        "indicators": {
          "evidence_files": [
            {
              "path": "pointer.py",
              "sha256": "a095aa6a4b08da23c6f2267bc18fe5f47342a3fa3225309796f54e1935f43207",
              "tlsh": "4af22e09ec1d089ac073cd2f5952a853ff1a07439a5eda17f8bc99901f743468ae4ef9"
            },
            {
              "path": "index.js",
              "sha256": "dd63a58755fb0ff2919a9debd8e6adb710a9f755454c10e766920dec788c4c33",
              "tlsh": "69814f065a95a234ed7247a99b07212be517a063a100e69cbdbe83840f76945c073fee"
            },
            {
              "path": "package.json",
              "sha256": "2dca436bcfa80b415c6742292f0f34e21fdf0685931458b1b83d5cf2f084848f",
              "tlsh": "dfe04f338d655c9344b48aa29a368a15f5718b3f10254c0f30bb511c97a29b245bab6c"
            }
          ],
          "package_integrity": [
            {
              "filename": "sypoi1-1.0.0.tgz",
              "hashes": {
                "sha1": "319d5cee242c0e942307560d75a9265d4bc19345",
                "sha512_sri": "sha512-aFJobp2UJW5C+ydadABTeY42YsjxpB+f3NqZgIvpZ+UYBespExyALtR4F6TIkp/aKE51b9jYfqHMy13JACNAYw=="
              }
            }
          ]
        }
      },
      "package": {
        "ecosystem": "npm",
        "name": "sypoi1"
      },
      "versions": [
        "1.0.0",
        "1.0.1"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "inspector-research@amazon.com"
      ],
      "name": "Amazon Inspector",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "IN-MAL-2026-007444",
        "import_time": "2026-06-24T22:32:48.281524075Z",
        "modified_time": "2026-06-24T22:18:30Z",
        "sha256": "b22a9450e70ba1095097d2779ad6da01c111c37e940d890fbfc21d1aeb6a0f11",
        "source": "amazon-inspector",
        "versions": [
          "1.0.0"
        ]
      },
      {
        "id": "IN-MAL-2026-007902",
        "import_time": "2026-07-01T21:04:21.066513892Z",
        "modified_time": "2026-07-01T20:48:32Z",
        "sha256": "3915c6ac9deb9f7d6d26939bb46fbe5782646d9f146fea26ad1da3a05ef7dbae",
        "source": "amazon-inspector",
        "versions": [
          "1.0.1"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (b22a9450e70ba1095097d2779ad6da01c111c37e940d890fbfc21d1aeb6a0f11)\nOn require, index.js silently bootstraps a full Python runtime on the installer\u0027s machine \u2014 first via `winget install -e --id Python.Python.3.12 --silent`, falling back to downloading `python-3.12.3-amd64.exe` from python.org and executing it with `/quiet InstallAllUsers=0 PrependPath=1` \u2014 then silently `pip install`s pyautogui, keyboard, mss, pillow, pyperclip, and uiautomation. It then spawns pointer.py, which installs system-wide hotkeys (Ctrl+C, Alt+S, F8/F9/F10, Alt+M, Ctrl+Q), creates a topmost transparent always-on-top Tk window using `overrideredirect(True)` to hide from the user, continuously monitors clipboard contents, and on hotkeys captures full-monitor screenshots and on-screen text via UI Automation. Captured clipboard text and base64-encoded screenshots are POSTed to a hardcoded destination at `https://iq-overlay-pointer.vercel.app/api`. The agent also exposes a `mash_callback` mode that hooks `keyboard.on_press` with `suppress=True` and substitutes attacker-supplied characters via `pyautogui.write(char)`, injecting keystrokes into whatever window is focused. The package\u0027s declared purpose \u2014 \"System binary configuration tool\" by author \"SysDev\" with keywords system/binary/util/config \u2014 does not match any of this behavior; the metadata is a cover story for a screen/clipboard surveillance and remote-keystroke-injection agent.\n",
  "id": "MAL-2026-6405",
  "modified": "2026-07-01T21:06:12Z",
  "published": "2026-06-24T22:18:30Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/sypoi1/v/1.0.0"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/sypoi1/v/1.0.1"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in sypoi1 (npm)"
}