MAL-2026-13414

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@atom8n/inspector/MAL-2026-13414.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13414
Published
2026-08-06T13:42:24Z
Modified
2026-08-06T14:34:44.640399514Z
Summary
Malicious code in @atom8n/inspector (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (5b72c3643bb990395103d396d62440db908b84769c904d4c14aa9b259f97807c)

This @atom8n/-scoped package impersonates Anthropic's official MCP inspector (package.json declares author 'Anthropic, PBC' and homepage https://modelcontextprotocol.io, with bug tracker at github.com/modelcontextprotocol/inspector) while intentionally regressing the security fixes upstream added for CVE-2025-49596. In the server, authentication is disabled by default via an inverted flag: const authDisabled = process.env.DANGEROUSLY_OMIT_AUTH!== "false", so authentication is off unless the user explicitly sets DANGEROUSLYOMITAUTH="false" (upstream defaults auth on and requires the flag be set to disable). The DNS-rebinding origin-validation middleware on the localhost proxy is fully commented out. The proxy's createTransport reads query.command and spawns it via StdioClientTransport({command: cmd, args, env}). When the developer starts the tool, any web origin the developer visits can POST to the proxy on port 6277 (/mcp, /sse, /stdio) and cause arbitrary local command execution under the developer's user account. The package also references an out-of-tree script .atom8n/gist/bump-version-85494d3cfc8ec830f889b29d476d0f7a/bump-version.mjs that is not present in the tarball. The bin entry is renamed to mcp-inspector-atom8n, so the RCE-capable proxy fires when the developer runs that CLI.

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "0.17.32"
            ],
            "id": "IN-MAL-2026-016505",
            "import_time": "2026-08-06T14:19:52.779261456Z",
            "modified_time": "2026-08-06T13:42:24Z",
            "source": "amazon-inspector",
            "sha256": "5b72c3643bb990395103d396d62440db908b84769c904d4c14aa9b259f97807c"
        }
    ]
}
References
Credits

Affected packages

npm / @atom8n/inspector

Package

Name
@atom8n/inspector
View open source insights on deps.dev
Purl
pkg:npm/%40atom8n/inspector

Affected ranges

Affected versions

0.*
0.17.32

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
indicators 
{
    "package_integrity": [
        {
            "filename": "inspector-0.17.32.tgz",
            "hashes": {
                "sha512_sri": "sha512-Z0mnwrwgkYyU53b8cFGwRP334vCdqLPxcXhvSj6NyzJBT0dIrY64JrDXeP7acbH3Wya+fzP64bluiFHZtGgp6A==",
                "sha1": "330b52544b9ddd61b4803013e2c045523748884f"
            }
        }
    ],
    "evidence_files": [
        {
            "path": "server/build/index.js",
            "tlsh": "4f14924a66f31027447ba12eeb4b5011372ad0036949e894bfdc939b6f8d45cebf27d8",
            "sha256": "d70f3ee1fa6f15807845d709be92a77fdd562347c65057ce8d4d8f5df9c53cee"
        },
        {
            "path": "package.json",
            "tlsh": "b661de31cd27ccb727c80226b478a246a37a50ab4d59fd8837e4925e4f9d26f22fd50d",
            "sha256": "a546726c4870e2128eaeea07d357f872ce6d8c6fde3023c5baa19316cfe367b6"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@atom8n/inspector/MAL-2026-13414.json"