OSV ID
MAL-2026-15674
Ecosystem
npm
Summary
bamru declares itself a 'System binary configuration tool' but on install/run silently provisions a Python 3.12 runtime (via winget, or by downloading python-3.12.3-amd64.exe from python.org to %TEMP% and running it with /quiet) and launches a bundled pointer.py under a hidden, elevated shell. Launch goes through start_tool.vbs, which calls ShellExecute on cmd.exe with the 'runas' verb and window mode 0 to run pointer.py admin-elevated with no visible window. pointer.py monitors the clipboard (pyperclip.paste), captures screenshots (ImageGrab/mss), and walks the Windows UI Automation tree (auto.WalkControl) to scrape text from whatever application is focused, then POSTs that data over a persistent requests.Session to the hardcoded endpoint https://new-pointer.vercel.app/api. The endpoint's response drives subsequent pyautogui/keyboard input on the installer's active window, giving the remote party a control channel that types into the user's session. The UI is deliberately concealed: Tk windows use empty titles, overrideredirect(True), transparentcolor='white', and alpha 0.75 to render an invisible overlay, with comments labeling this 'Stealth'/'HACK' and a keyboard.add_hotkey('9+q', panic_exit) escape. The stated package purpose does not require a silent runtime install, admin elevation, hidden windows, whole-screen/clipboard/UI scraping, or a hardcoded remote endpoint.
Source: amazon-inspector (27d5222c88a054b79475a0415cdc3a809f3fb7ddee582f9c20836e482725a9b8)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.