MAL-2026-18489

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ifasn/mmdd-doc-mcp/MAL-2026-18489.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-18489
Published
2026-11-02T20:58:12Z
Modified
2026-11-02T21:15:06Z
Summary
Malicious code in @ifasn/mmdd-doc-mcp (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (2999c5d0dd2a35fe1dfb6bdc17da36aaed07d4f6fa7e10f9f395a4b39d1c7265)

@ifasn/mmdd-doc-mcp advertises itself as a Markdown TOC/stats/table MCP server, but on startup (bin entry / npm start) its index.js performs an unsolicited IMDSv2 handshake against the Alibaba Cloud ECS metadata endpoint 100.100.100.200: a PUT to /latest/api/token with X-aliyun-ecs-metadata-token-ttl-seconds followed by a GET to /latest/meta-data/ram/security-credentials/, retrieving the host instance's RAM temporary security credentials and other metadata. The response is written to output/meta_v2_dump.txt in the current working directory. The behavior is unrelated to any Markdown processing. The published tarball also ships patch scripts (patch111.js, patch112.js) that enumerate additional host secret paths — /etc/shadow, /etc/passwd, /root/.ssh/id_rsa, /var/www/html/.env, and the Kubernetes service-account token at /var/run/secrets/kubernetes.io/serviceaccount/token — with preview labels SENSITIVE-FILE / SHADOW-ENTRIES / TOKEN-LENGTH, and output/meta_field_dump.txt confirms those host-path probes were previously executed. A code comment claiming '无网络上报' (no network reporting) and the 'v2 probe edition' framing are cover-story labels; the operation is unauthorized reading of installer-side cloud instance-role credentials by a package whose declared purpose does not require any host metadata access.

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "IN-MAL-2026-022504",
            "import_time":  "2026-11-02T21:10:56.127045766Z",
            "modified_time":  "2026-11-02T21:00:10Z",
            "sha256":  "00e9e090da5207e0b655eea457540148ea54666249f50e3e648f0ad354d5512f",
            "source":  "amazon-inspector",
            "versions":  [
                "1.1.1"
            ]
        },
        {
            "id":  "IN-MAL-2026-022503",
            "import_time":  "2026-11-02T21:10:56.056764919Z",
            "modified_time":  "2026-11-02T21:00:03Z",
            "sha256":  "69c49355c8e32d2c1f55af1e899ff1bf83021a58c98e06be68a99456fbe98efb",
            "source":  "amazon-inspector",
            "versions":  [
                "1.0.6"
            ]
        },
        {
            "id":  "IN-MAL-2026-022507",
            "import_time":  "2026-11-02T21:10:56.34844077Z",
            "modified_time":  "2026-11-02T21:00:34Z",
            "sha256":  "567db56a574896ab82ea35b0885935abc0acc83def8eeb81187c58382f68d3dd",
            "source":  "amazon-inspector",
            "versions":  [
                "1.0.3"
            ]
        },
        {
            "id":  "IN-MAL-2026-022509",
            "import_time":  "2026-11-02T21:10:56.515094589Z",
            "modified_time":  "2026-11-02T21:00:48Z",
            "sha256":  "aae5bba340b14529354a901037e144fd382ed5e8ba9c7fe6342e8448f5e8b12e",
            "source":  "amazon-inspector",
            "versions":  [
                "1.0.4"
            ]
        },
        {
            "id":  "IN-MAL-2026-022512",
            "import_time":  "2026-11-02T21:10:56.823224371Z",
            "modified_time":  "2026-11-02T21:01:13Z",
            "sha256":  "df4004eb0f6cbdb9bb11b4096e474a3f078e15b4b29fe660ca64c1bb05059095",
            "source":  "amazon-inspector",
            "versions":  [
                "1.1.6"
            ]
        },
        {
            "id":  "IN-MAL-2026-022496",
            "import_time":  "2026-11-02T21:10:55.509834981Z",
            "modified_time":  "2026-11-02T20:59:07Z",
            "sha256":  "f00189c1838ba969bfaf0263f58f089dfe2dcf29e18652da3b8a9f0298c5ba63",
            "source":  "amazon-inspector",
            "versions":  [
                "1.0.4-2"
            ]
        },
        {
            "id":  "IN-MAL-2026-022505",
            "import_time":  "2026-11-02T21:10:56.202999848Z",
            "modified_time":  "2026-11-02T21:00:20Z",
            "sha256":  "134b408ae3c9b75f1fea4228de5160efa89f3730961389fd8b31270edc6900fa",
            "source":  "amazon-inspector",
            "versions":  [
                "1.1.8"
            ]
        },
        {
            "id":  "IN-MAL-2026-022500",
            "import_time":  "2026-11-02T21:10:55.811762028Z",
            "modified_time":  "2026-11-02T20:59:38Z",
            "sha256":  "2fd806537ea00c81b41f1e8f1425f7b296f8988b965bbb6f4524c61080beb18c",
            "source":  "amazon-inspector",
            "versions":  [
                "2.0.1"
            ]
        },
        {
            "id":  "IN-MAL-2026-022494",
            "import_time":  "2026-11-02T21:10:55.37471424Z",
            "modified_time":  "2026-11-02T20:58:52Z",
            "sha256":  "6d88c8191553a54067a17aadb544e42f930a2fe16038cf5c15384a36064661cb",
            "source":  "amazon-inspector",
            "versions":  [
                "1.0.1"
            ]
        },
        {
            "id":  "IN-MAL-2026-022495",
            "import_time":  "2026-11-02T21:10:55.433644053Z",
            "modified_time":  "2026-11-02T20:59:00Z",
            "sha256":  "7f8d552bb28ae98665e9faa9637ce5ec95c83103cc77df68732a25d98d63d42b",
            "source":  "amazon-inspector",
            "versions":  [
                "1.0.5"
            ]
        },
        {
            "id":  "IN-MAL-2026-022492",
            "import_time":  "2026-11-02T21:10:55.21107841Z",
            "modified_time":  "2026-11-02T20:58:34Z",
            "sha256":  "9dafe071e7822c477847c3ccd3488d937815a0c1b59f44c3d28b5fbaa5824b99",
            "source":  "amazon-inspector",
            "versions":  [
                "1.1.3"
            ]
        },
        {
            "id":  "IN-MAL-2026-022499",
            "import_time":  "2026-11-02T21:10:55.729097872Z",
            "modified_time":  "2026-11-02T20:59:32Z",
            "sha256":  "17e5c38a039ae01c30fa1f57c820c338c05b2c630fdd90bc52eec446491d4232",
            "source":  "amazon-inspector",
            "versions":  [
                "1.1.7"
            ]
        },
        {
            "id":  "IN-MAL-2026-022489",
            "import_time":  "2026-11-02T21:10:54.927928771Z",
            "modified_time":  "2026-11-02T20:58:12Z",
            "sha256":  "2bc47781fce0924a29fc2c6a39a2c200dc547f9a3fd5a9071ac10c5d8dca579e",
            "source":  "amazon-inspector",
            "versions":  [
                "1.1.9-2"
            ]
        },
        {
            "id":  "IN-MAL-2026-022498",
            "import_time":  "2026-11-02T21:10:55.672217065Z",
            "modified_time":  "2026-11-02T20:59:26Z",
            "sha256":  "3098acbe44e80ad3165fb08b2517d3a638c8a82d6c90e069b14ed78260dbd263",
            "source":  "amazon-inspector",
            "versions":  [
                "2.0.4"
            ]
        },
        {
            "id":  "IN-MAL-2026-022510",
            "import_time":  "2026-11-02T21:10:56.579725665Z",
            "modified_time":  "2026-11-02T21:00:58Z",
            "sha256":  "b60c6fc375909417e7edeb7e26e2d43f6b2cb285774425ddf4081e3b1e60724a",
            "source":  "amazon-inspector",
            "versions":  [
                "1.1.0"
            ]
        },
        {
            "id":  "IN-MAL-2026-022490",
            "import_time":  "2026-11-02T21:10:55.004373224Z",
            "modified_time":  "2026-11-02T20:58:18Z",
            "sha256":  "1766bd7f233a3ba238a80209447391781f70d44141fea0a9975a5969ff4c614b",
            "source":  "amazon-inspector",
            "versions":  [
                "1.1.2"
            ]
        },
        {
            "id":  "IN-MAL-2026-022508",
            "import_time":  "2026-11-02T21:10:56.457820596Z",
            "modified_time":  "2026-11-02T21:00:41Z",
            "sha256":  "2999c5d0dd2a35fe1dfb6bdc17da36aaed07d4f6fa7e10f9f395a4b39d1c7265",
            "source":  "amazon-inspector",
            "versions":  [
                "1.1.5"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / @ifasn/mmdd-doc-mcp

Package

Name
@ifasn/mmdd-doc-mcp
View open source insights on deps.dev
Purl
pkg:npm/%40ifasn/mmdd-doc-mcp

Affected ranges

Affected versions

1.*
1.0.1
1.0.3
1.0.4-2
1.0.4
1.0.5
1.0.6
1.1.0
1.1.1
1.1.2
1.1.3
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9-2
2.*
2.0.1
2.0.4

Database specific

cwes 
[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    },
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files":  [
        {
            "path":  "index.js",
            "sha256":  "92087d881c2be17d5de2380f7ead5be77aeece339f23b90fbdaebf8f20eecc41",
            "tlsh":  "0542ea9692bf553c097690644b0f8429f6a696133902f9d4fadcc3463f858ac82d6bfc"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "mmdd-doc-mcp-1.1.6.tgz",
            "hashes":  {
                "sha1":  "d7911a099f3a003c4e2b108a4da9c779bf2d283a",
                "sha512_sri":  "sha512-kqTOf+DghmKc2eQsMATpxGOMvSZUlh78tbP5R3izm7zFwHdKKzMYs/xIlXv6HmdOWncaa+BwYlwVI2UpgiMyKg=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ifasn/mmdd-doc-mcp/MAL-2026-18489.json"