MAL-2026-10629: Malicious code in ai-pro-sdk (npm)
The ai-pro-sdk npm package versions 2.0.1 and 2.0.3 is a malicious package that advertises itself as a Vercel AI SDK provider but contains no functional code. Instead, its installation causes an unrelated dependency, data-blockv, to be installed without legitimate purpose. This behavior matches a dropper-shell pattern where the advertised package acts as a lure, and the actual malicious code execution surface resides in a sibling dependency.
AI Analysis
Technical Summary
The ai-pro-sdk package at versions 2.0.1 and 2.0.3 is designed to appear as a legitimate AI SDK provider but ships no actual code in its tarball. The package.json references a main file and files directory that do not exist, and the build script is a no-op. It declares a runtime dependency on data-blockv@^1.0.1, which is unrelated to the advertised functionality and is not referenced elsewhere in the package. Installing ai-pro-sdk results in the installation of data-blockv, which is the likely malicious component. This pattern is consistent with a dropper-shell attack where the primary package is a cover to deliver a malicious sibling dependency.
Potential Impact
Users installing ai-pro-sdk versions 2.0.1 or 2.0.3 will unknowingly install the unrelated data-blockv package, which may contain malicious code. The ai-pro-sdk package itself contains no functional code, so the risk arises from the transitive dependency. This could lead to execution of malicious code on the host system if data-blockv is exploited or contains harmful functionality.
Mitigation Recommendations
No official patch or fix is currently documented for ai-pro-sdk. Users should avoid installing ai-pro-sdk versions 2.0.1 and 2.0.3. Review and audit dependencies before installation, especially for packages with suspicious or missing code. Monitor vendor advisories for any updates or official remediation guidance. Since this is not a cloud service, remediation depends on user action to avoid or remove the affected package.
MAL-2026-10629: Malicious code in ai-pro-sdk (npm)
Description
The ai-pro-sdk npm package versions 2.0.1 and 2.0.3 is a malicious package that advertises itself as a Vercel AI SDK provider but contains no functional code. Instead, its installation causes an unrelated dependency, data-blockv, to be installed without legitimate purpose. This behavior matches a dropper-shell pattern where the advertised package acts as a lure, and the actual malicious code execution surface resides in a sibling dependency.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The ai-pro-sdk package at versions 2.0.1 and 2.0.3 is designed to appear as a legitimate AI SDK provider but ships no actual code in its tarball. The package.json references a main file and files directory that do not exist, and the build script is a no-op. It declares a runtime dependency on data-blockv@^1.0.1, which is unrelated to the advertised functionality and is not referenced elsewhere in the package. Installing ai-pro-sdk results in the installation of data-blockv, which is the likely malicious component. This pattern is consistent with a dropper-shell attack where the primary package is a cover to deliver a malicious sibling dependency.
Potential Impact
Users installing ai-pro-sdk versions 2.0.1 or 2.0.3 will unknowingly install the unrelated data-blockv package, which may contain malicious code. The ai-pro-sdk package itself contains no functional code, so the risk arises from the transitive dependency. This could lead to execution of malicious code on the host system if data-blockv is exploited or contains harmful functionality.
Mitigation Recommendations
No official patch or fix is currently documented for ai-pro-sdk. Users should avoid installing ai-pro-sdk versions 2.0.1 and 2.0.3. Review and audit dependencies before installation, especially for packages with suspicious or missing code. Monitor vendor advisories for any updates or official remediation guidance. Since this is not a cloud service, remediation depends on user action to avoid or remove the affected package.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-10629
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a577ef668715ace43b41c72
Added to database: 07/15/2026, 12:37:10 UTC
Last enriched: 07/15/2026, 12:59:16 UTC
Last updated: 07/16/2026, 03:36:27 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.