MAL-2026-12789

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/fa-mcp-sdk/MAL-2026-12789.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-12789
Published
2026-08-05T13:56:26Z
Modified
2026-08-05T14:37:12.213245727Z
Summary
Malicious code in fa-mcp-sdk (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (62142cbcb6da6a6c078dd91a92cc28d8cfa30a9f4fc901ab2cdbc4cfd6540abb)

The package includes cli-template/update.cjs, an update helper that combines several install/update-time capabilities: it imports child_process, https, fs, and os; reads os.hostname() and other system identifiers; issues https.request POST calls to a remote endpoint; performs filesystem existence checks; and calls spawn('/bin/bash',...) to execute shell commands. The composition — host identifier collection, arbitrary shell execution via /bin/bash, and outbound HTTPS POST inside a self-updater — provides a mechanism to run remote-directed commands on machines that install or run this package. Additional files under dist/core/ (agent-tester/services/TesterMcpClientService.js, web/server-http.js) exercise ping/HTTP GET/POST patterns consistent with host reachability probing and outbound command/data flow.

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-08-05T14:20:02.124840394Z",
            "modified_time": "2026-08-05T13:56:26Z",
            "sha256": "62142cbcb6da6a6c078dd91a92cc28d8cfa30a9f4fc901ab2cdbc4cfd6540abb",
            "id": "IN-MAL-2026-015101",
            "versions": [
                "0.12.72"
            ],
            "source": "amazon-inspector"
        }
    ]
}
References
Credits

Affected packages

npm / fa-mcp-sdk

Package

Name
fa-mcp-sdk
View open source insights on deps.dev
Purl
pkg:npm/fa-mcp-sdk

Affected ranges

Affected versions

0.*
0.12.72

Database specific

cwes 
[
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "package_integrity": [
        {
            "hashes": {
                "sha512_sri": "sha512-pvMfQs8jHV2zkc4H5FI8xRI2u2FF+CV3nZ6PljHxnZmislb5W3TLBVSuMWn/sR2VPkes4j/nJmareLpV8ldi2A==",
                "sha1": "cc944a646962f9a4e98f9f12bc16ab4c738ff7fc"
            },
            "filename": "fa-mcp-sdk-0.12.72.tgz"
        }
    ],
    "evidence_files": [
        {
            "path": "cli-template/update.cjs",
            "sha256": "85c7e378c7990d6471eb560c2aefac165cdb001e211c5e5d260b355821ec8869",
            "tlsh": "16b209561aff46331833c0ef5a5b90222617e2533509f5a1b9ed42552fcaf68c4f3aca"
        },
        {
            "path": "dist/core/agent-tester/services/TesterMcpClientService.js",
            "sha256": "21754014e85cbacccc15b66f0df4ff673593c9ca2014483c6d65526528fc90ac",
            "tlsh": "18b2235696f3203382632169cb5ba1117335e4033506ec68bb6c935eef8916cdbe6bdc"
        },
        {
            "path": "dist/core/web/server-http.js",
            "sha256": "054572815d8eda65b54d5e8c14f90d8a3982bd32659dc7a14f21e3dfd7f882b3",
            "tlsh": "cf23f95a76f3113a49b361a98b4ba0016338e5037105d8b0ff9d832d9fcc45dcba67da"
        },
        {
            "path": "dist/core/web/static/agent-tester/script.js",
            "sha256": "c851067a3b1dc787568e133e9eb133c545e5d7c85153e8a4ba1f443be44767dd",
            "tlsh": "8be3615a67fb1131826721be5f8f61013631900f290add1d7e6c42d89fc8a749ab2ff9"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/fa-mcp-sdk/MAL-2026-12789.json"