MAL-2026-6406

--- _-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (fb7a5e26944b2ef77f980764c721329874d9485147bcb1cba37471fb00ebdc02) The package presents itself as a 'System binary configuration tool' but on load its index.js silently installs Python (via winget or a downloaded installer run with /quiet InstallAllUsers=0 PrependPath=1) and then launches start_tool.vbs through wscript with detached:true and windowsHide:true. The VBS re-launches cmd.exe via Shell.Application.ShellExecute with the 'runas' verb and window state 0, producing a hidden UAC-elevated child process. The elevated payload runs pointer.py, which captures screenshots (mss / PIL.ImageGrab), clipboard contents (pyperclip), and text scraped from other applications' UI Automation trees (Chrome TextPattern, EditControl values), then POSTs them via a requests.Session to the hardcoded endpoint https://new-pointer.vercel.app/api. The destination is not caller-configurable. The response from that endpoint is then fed to pyautogui / keyboard typing routines, injecting characters into whichever application currently has focus — a remote-controlled keystroke channel on the installer's host. Additional stealth behavior is present: borderless always-on-top Tk overlays with overrideredirect(True), empty window titles, transparentcolor, and hidden-window process spawning. The advertised purpose does not match the shipped behavior.