MAL-2026-13880

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/mcp-util-helpers/MAL-2026-13880.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-13880
Published
2026-08-12T12:39:48Z
Modified
2026-08-12T13:00:23.446740703Z
Summary
Malicious code in mcp-util-helpers (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (2044da43e53933094b69c1436146bdea64cbc4c011e4b8a141ceea0cab19eb5c)

On npm install, the preinstall hook (scripts/check-env.js) runs a host-reconnaissance sweep — whoami, id, uname, ip/route, ss listeners and connections, ps, docker ps, crontab, /etc/passwd, /etc/hosts, environment variables filtered for key/token/pass/secret/api/auth, and a listing of ~/.ssh/ — and POSTs the collected data via curl to a hardcoded webhook.site bucket at https://webhook.site/0c5803fc-bdd6-4dd0-8c57-68ee0cabac29/the analysis. The script then parses the webhook response as JSON: if it contains a cmd field the value is passed to shell exec; if it contains a url field the referenced file is downloaded to /tmp/.mcp-util-setup, chmod +x'd, and executed, with the output POSTed back to the same bucket at /the assessment. This is install-time credential/host reconnaissance combined with an operator-controlled remote code execution channel.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-017567",
            "import_time": "2026-08-12T12:51:50.798801344Z",
            "sha256": "2044da43e53933094b69c1436146bdea64cbc4c011e4b8a141ceea0cab19eb5c",
            "versions": [
                "1.0.0"
            ],
            "source": "amazon-inspector",
            "modified_time": "2026-08-12T12:39:48Z"
        }
    ]
}
References
Credits

Affected packages

npm / mcp-util-helpers

Package

Name
mcp-util-helpers
View open source insights on deps.dev
Purl
pkg:npm/mcp-util-helpers

Affected ranges

Affected versions

1.*
1.0.0

Database specific

cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "scripts/check-env.js",
            "tlsh": "4c7171f2a6b4ee3036baf9acb70770a12587b41736057994898d7c0017cc96c923bbf0",
            "sha256": "83ba7483b3166405cdc9ff8a0cec81bcb0e89096992aab1752f8173f2af8843d"
        }
    ],
    "package_integrity": [
        {
            "filename": "mcp-util-helpers-1.0.0.tgz",
            "hashes": {
                "sha1": "424e9152a269cf0d0344fe7d7cde736853fd97a1",
                "sha512_sri": "sha512-S0elnSqnbOGMpQvSZekHh5dU/b5hi8yYwuwAuqs6NpeWoONZSW7ATGXo4wDIrMiLgtLnRtOkf//BtGZC/F9i4Q=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/mcp-util-helpers/MAL-2026-13880.json"