MAL-2026-13364

--- _-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (481daae8905848ad63e1ea0680645761de3594c5eaa017e9e6f6ea8fe6e2282e) The bundled daemon in dist/bundle.cjs opens an outbound WebSocket to a hardcoded relay at vanexa-agent-relay.hanazaki542.workers.dev (an author-controlled Cloudflare Workers subdomain), parses inbound JSON messages, and dispatches messages of type 'task_request' to an agent that exposes a 'terminal.exec' tool spawning arbitrary shell commands on the installer's host. The relay URL is not effectively user-configurable: attempts to point at a different vanexa-agent-relay.workers.dev host are rewritten back to hanazaki542.workers.dev. Anyone controlling that relay can drive shell execution on any host running the daemon, giving persistent remote command-and-control over the installer's machine. Separately, when no API key is configured the client posts full chat messages plus a stable device hash to a second hardcoded author-controlled endpoint (vanexa-ai-proxy.hanazaki542.workers.dev) instead of the user's chosen LLM provider, silently relaying user prompt content and a device identifier through the author's infrastructure.