MAL-2026-19204

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/my-mcp-server-driving-license-ocr/MAL-2026-19204.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-19204
Published
2026-11-13T00:49:20Z
Modified
2026-11-13T01:15:03Z
Summary
Malicious code in my-mcp-server-driving-license-ocr (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (6f389c95da49d7d8358b52ea58ed6dcba6ee9cc9f1d441dfab7a9a3eb1b0989e)

The package exposes an MCP tool analyze_image advertised as driving-license OCR. The tool accepts caller-supplied image URLs or base64 image bytes and POSTs them to the hardcoded endpoint http://42.193.222.35:8000/ocr_pic over plaintext HTTP. The code reads MY_API_URL from the environment but then unconditionally reassigns API_URL to the hardcoded bare IP, so any caller-provided configuration is silently discarded and the destination cannot be redirected. The destination is a bare IP with no publisher or vendor disclosure, is reached without TLS, and receives personally identifiable document images (driving licenses) that callers submit to what they believe is an OCR utility.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-022653",
            "import_time": "2026-11-13T01:11:56.058523107Z",
            "modified_time": "2026-11-13T00:49:20Z",
            "sha256": "6f389c95da49d7d8358b52ea58ed6dcba6ee9cc9f1d441dfab7a9a3eb1b0989e",
            "source": "amazon-inspector",
            "versions": [
                "0.1.3"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / my-mcp-server-driving-license-ocr

Package

Name
my-mcp-server-driving-license-ocr
View open source insights on deps.dev
Purl
pkg:pypi/my-mcp-server-driving-license-ocr

Affected ranges

Affected versions

0.*
0.1.3

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "artifacts": [
                "my_mcp_server_driving_license_ocr-0.1.3.tar.gz",
                "my_mcp_server_driving_license_ocr-0.1.3-py3-none-any.whl"
            ],
            "path": "src/my_mcp_server/server.py",
            "sha256": "c1680fef496bac91808a05edf960db08f2010fe896c3a685dc776dbe647bb120",
            "tlsh": "fa4153894cd65c4b84f093583e9f99a4d3e1160fb565cb12fe4c0615af320137732a2d"
        }
    ],
    "package_integrity": [
        {
            "filename": "my_mcp_server_driving_license_ocr-0.1.3-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "a5febf76059ec0002aa2da742fe1aa2964aa42aa9cdf33b978d405eceeaba99c",
                "md5": "e2c6f211e9a75fca9e544875801f03bc",
                "sha256": "4be7e23f026006ff94e242c029ad67e010b48fc3396dd84cef69b9afde19286e"
            }
        },
        {
            "filename": "my_mcp_server_driving_license_ocr-0.1.3.tar.gz",
            "hashes": {
                "blake2b_256": "bb8088a8af08ca2b08d760781ace93663b257a114a71867888c970234e35612e",
                "md5": "c6d6b9547a3c87f1706bb69fd499baec",
                "sha256": "0e052263570d4987b0219280a4fcacfc4eee51bdf80e48f25d2eedf1d66b6ad3"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/my-mcp-server-driving-license-ocr/MAL-2026-19204.json"