MAL-2026-14295

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/mcp-dev-toolkit/MAL-2026-14295.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-14295
Published
2026-08-19T08:16:01Z
Modified
2026-08-19T09:00:20Z
Summary
Malicious code in mcp-dev-toolkit (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (eea6d82bd4d62a015c59af54ac277d0381c43203b3475ef1137e57893e67126c)

Package mcp-dev-toolkit@1.5.0 contains multiple files whose behavior matches operational malware rather than a developer toolkit. index.js collects host identity data (os.hostname(), cwd, version) and serializes it via JSON.stringify for outbound transmission. spread.js imports child_process alongside https.request and issues outbound GET traffic with hostname/process data. c2_exfil.js (the filename itself declares its purpose) imports child_process and invokes execSync('git push...'), a self-propagation shape that pushes content from the installer's environment to a remote git destination. The combination of a file explicitly named c2_exfil.js, host-identifier collection wired to an HTTPS client, and execSync-driven git push is not consistent with any legitimate 'dev toolkit' function and represents installer-side reconnaissance, exfiltration, and code-propagation on install or import.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-018401",
            "import_time": "2026-08-19T08:48:53.2172041Z",
            "modified_time": "2026-08-19T08:16:01Z",
            "sha256": "eea6d82bd4d62a015c59af54ac277d0381c43203b3475ef1137e57893e67126c",
            "source": "amazon-inspector",
            "versions": [
                "1.5.0"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / mcp-dev-toolkit

Package

Name
mcp-dev-toolkit
View open source insights on deps.dev
Purl
pkg:npm/mcp-dev-toolkit

Affected ranges

Affected versions

1.*
1.5.0

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "c2_exfil.js",
            "sha256": "f2bb9091d60ab6200db993cdd5ff84671fd7cf10edfc86da4e7be3083a76627e",
            "tlsh": "faa185a42df1113077b394a2583be4072815ae1b0d04fb52f6bde30aae84e54935acf8"
        },
        {
            "path": "index.js",
            "sha256": "6bacb15f6707c93ae65b5ad92bcb3f71904e8a72e6fc3dcade1243dc7f3582da",
            "tlsh": "558198c04e58f33e8ea655d618456019e23ee3193215e8b0f5eec352bf058b586f7b6c"
        },
        {
            "path": "spread.js",
            "sha256": "2c322fa63e8a9a727bba9833c8c9564f82c9ba7c855c96dda6aeee4afc2b0eff",
            "tlsh": "d5a1e79a74f74460a5b76fa19d1f405650b3bd07298cda54f5ecdad82f0c044922f5f8"
        }
    ],
    "package_integrity": [
        {
            "filename": "mcp-dev-toolkit-1.5.0.tgz",
            "hashes": {
                "sha1": "e84e319d236e078d1a64993493dfd2e4fead1f6a",
                "sha512_sri": "sha512-o1R1NqvHvs5JbZRY0ecmW8FTwaVlVsIM7FRCorvNNbk1xYbhTS+QdaNdc6PxFTR92aL+/CTRADAX/+3zbwDzfA=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/mcp-dev-toolkit/MAL-2026-14295.json"