MAL-2026-16061

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@yongot/canary-mcp-isolation/MAL-2026-16061.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-16061
Published
2026-09-09T01:42:00Z
Modified
2026-09-09T02:00:04Z
Summary
Malicious code in @yongot/canary-mcp-isolation (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (1fed7c0ff512ccb2e87647a41a92653138ff50b2be906043aba86ce76b49e340)

The package's postinstall script (beacon.js), also re-executed on require via index.js, sends the installer's hostname, run identifiers, and the output of the id shell command to a hardcoded third-party collector at https://webhook.site/b76376f8-118e-44f1-a5ee-8a73f55b137b over HTTPS. The same script probes the GCP instance metadata service at 169.254.169.254 and metadata.google.internal with the Metadata-Flavor: Google header and reports the status and body back to the webhook, disclosing whether the install environment is a cloud VM and what IMDS returns. Data leaves the installer's host to an attacker-controlled collector automatically on npm install and on require(), without consent.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-019752",
            "import_time": "2026-09-09T01:51:49.354035Z",
            "modified_time": "2026-09-09T01:42:00Z",
            "sha256": "1fed7c0ff512ccb2e87647a41a92653138ff50b2be906043aba86ce76b49e340",
            "source": "amazon-inspector",
            "versions": [
                "1.0.1"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / @yongot/canary-mcp-isolation

Package

Name
@yongot/canary-mcp-isolation
View open source insights on deps.dev
Purl
pkg:npm/%40yongot/canary-mcp-isolation

Affected ranges

Affected versions

1.*
1.0.1

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "beacon.js",
            "sha256": "12a3c5bf3d7c959c1ffd2617df3fca75d18820511f2e457c2bc40a8db9b20b9b",
            "tlsh": "634144eb62f4b2224af2a2dc836795076327e341b188efd4f8dc06a21fd557855835f8"
        }
    ],
    "package_integrity": [
        {
            "filename": "canary-mcp-isolation-1.0.1.tgz",
            "hashes": {
                "sha1": "a3b72d630efb5c99354517498eee2d82818ac0db",
                "sha512_sri": "sha512-oZtCzQWOENK1+S7aX2dlXCORyWLm+2++P8R3sGkwTLZ2K3Z1oonexham4g2D2emR3Fy0RctxL4L3MWyy3cJX7A=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@yongot/canary-mcp-isolation/MAL-2026-16061.json"