MAL-2026-12401

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/mcp-audit-sync-internal/MAL-2026-12401.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-12401
Published
2026-08-05T12:33:32Z
Modified
2026-08-05T13:35:37.351666329Z
Summary
Malicious code in mcp-audit-sync-internal (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (897822fdfb08c83d7d949c16e497d6897b9b679cc2f05a0409b1ec369a1f10fc)

mcp-audit-sync-internal@99.9.9 declares scripts.preinstall = 'node index.js'. On Windows, index.js spawns a hidden PowerShell process that fetches a ZIP from https://files.catbox.moe/5khq55.zip, expands it into %TEMP%, and then Start-Process's the extracted VerificationTool.exe. The remote artifact is unpinned, unverified (no hash or signature check), delivered from an anonymous throwaway file host unrelated to the package publisher, and the fetch/execute is hidden from the user via -WindowStyle Hidden. This fires automatically on npm install, yielding arbitrary code execution on any Windows installer's host. Package metadata ('Administrative sync tool for corporate environments', author 'IT Compliance') and the 'VerificationTool.exe' filename are cover-story framing that mismatches the actual behavior; the 99.9.9 version is a placeholder-sentinel shape.

Database specific 
{
    "malicious-packages-origins": [
        {
            "source": "amazon-inspector",
            "import_time": "2026-08-05T13:08:39.325725733Z",
            "id": "IN-MAL-2026-014705",
            "versions": [
                "99.9.9"
            ],
            "modified_time": "2026-08-05T12:33:32Z",
            "sha256": "897822fdfb08c83d7d949c16e497d6897b9b679cc2f05a0409b1ec369a1f10fc"
        }
    ]
}
References
Credits

Affected packages

npm / mcp-audit-sync-internal

Package

Name
mcp-audit-sync-internal
View open source insights on deps.dev
Purl
pkg:npm/mcp-audit-sync-internal

Affected ranges

Affected versions

99.*
99.9.9

Database specific

cwes 
[
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "evidence_files": [
        {
            "tlsh": "66f0dcb243e99034db709ac3bb9137432853d71a1a13e25219aa41857f14a108bdb8ed",
            "path": "index.js",
            "sha256": "d456c8e6d47b64505e530d5648071be4319c4abd35a0fa3ee07772111cab9152"
        },
        {
            "tlsh": "7cd02b718f21a92325cc56a1482b900a21700e5b00487c003797a11491c967396fe30f",
            "path": "package.json",
            "sha256": "168021c7b37b6347041506c7d640ceb2d0cb21a6b2c1c09e31768f48d9c7b194"
        }
    ],
    "package_integrity": [
        {
            "hashes": {
                "sha512_sri": "sha512-PCp3OLeIw4orrHaLjlmO4PI2GyhiYe5cig45t2zdRanU+2RCm82rVBUL+ss1Xp4qZbosLgu8HBztJwc1VbFVAg==",
                "sha1": "9a03f9e53fc445da231e50c68cf6595d7d7c92e2"
            },
            "filename": "mcp-audit-sync-internal-99.9.9.tgz"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/mcp-audit-sync-internal/MAL-2026-12401.json"