Malicious code in @love-moon/conductor-cli (npm)
The @love-moon/conductor-cli npm package contains malicious code that opens a WebSocket connection to a remote server controlled by an attacker. This connection allows the attacker to send commands that are executed directly on the host system via a spawned shell or AI CLI with disabled safety checks. This results in full remote command execution on the affected system. The affected versions are 0.7.4, 0.7.5, 0.7.6, and 0.8.0. No official patch or remediation guidance is provided in the available data.
AI Analysis
Technical Summary
The conductor daemon component of the @love-moon/conductor-cli package establishes a WebSocket connection to https://conductor.conductor-ai.top or a user-configured backend URL. It registers a message handler that writes data received from the server directly into a node-pty process running the user's default shell or an AI CLI with disabled approval and sandboxing flags. This design allows any party controlling the WebSocket endpoint or intercepting the connection to execute arbitrary commands on the host system, effectively granting full remote code execution capabilities. The malicious behavior is present in versions 0.7.4, 0.7.5, 0.7.6, and 0.8.0 of the package.
Potential Impact
An attacker controlling the WebSocket server or able to impersonate it can execute arbitrary commands on the host machine where the package is installed. This leads to full host compromise, including the ability to run any code with the privileges of the user running the conductor-cli. The disabled safety flags in the AI CLI components further remove any local approval or sandbox restrictions, increasing the risk and impact of exploitation.
Mitigation Recommendations
No official patch or remediation is currently documented. Users should immediately discontinue use of the affected versions (0.7.4, 0.7.5, 0.7.6, 0.8.0) of @love-moon/conductor-cli and avoid connecting to untrusted WebSocket endpoints. Monitor vendor advisories for any forthcoming fixes or official guidance. Until a fix is available, do not run this package in any environment where security is a concern.
Malicious code in @love-moon/conductor-cli (npm)
Description
The @love-moon/conductor-cli npm package contains malicious code that opens a WebSocket connection to a remote server controlled by an attacker. This connection allows the attacker to send commands that are executed directly on the host system via a spawned shell or AI CLI with disabled safety checks. This results in full remote command execution on the affected system. The affected versions are 0.7.4, 0.7.5, 0.7.6, and 0.8.0. No official patch or remediation guidance is provided in the available data.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The conductor daemon component of the @love-moon/conductor-cli package establishes a WebSocket connection to https://conductor.conductor-ai.top or a user-configured backend URL. It registers a message handler that writes data received from the server directly into a node-pty process running the user's default shell or an AI CLI with disabled approval and sandboxing flags. This design allows any party controlling the WebSocket endpoint or intercepting the connection to execute arbitrary commands on the host system, effectively granting full remote code execution capabilities. The malicious behavior is present in versions 0.7.4, 0.7.5, 0.7.6, and 0.8.0 of the package.
Potential Impact
An attacker controlling the WebSocket server or able to impersonate it can execute arbitrary commands on the host machine where the package is installed. This leads to full host compromise, including the ability to run any code with the privileges of the user running the conductor-cli. The disabled safety flags in the AI CLI components further remove any local approval or sandbox restrictions, increasing the risk and impact of exploitation.
Mitigation Recommendations
No official patch or remediation is currently documented. Users should immediately discontinue use of the affected versions (0.7.4, 0.7.5, 0.7.6, 0.8.0) of @love-moon/conductor-cli and avoid connecting to untrusted WebSocket endpoints. Monitor vendor advisories for any forthcoming fixes or official guidance. Until a fix is available, do not run this package in any environment where security is a concern.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-13428
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a74cf88bf8831d5391ad79f
Added to database: 08/06/2026, 18:16:40 UTC
Last enriched: 08/06/2026, 18:29:55 UTC
Last updated: 08/07/2026, 00:36:18 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.