MAL-2026-4382

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@djessicatony/folk-mcp-canary/MAL-2026-4382.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-4382
Published
2026-05-21T00:52:43Z
Modified
2026-05-26T06:01:47.438369734Z
Summary
Malicious code in @djessicatony/folk-mcp-canary (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (a504172fe0e456bd96cf7b4f9a6b6dda65dee7bd573833bbf5963b0be7a05ae8)

index.js contains a beacon-style exfiltration primitive: a fetch() POST at line 60-61 sends process.env data (read at lines 30 and 34) to a hardcoded destination URL (https://REPLACE-WITH-YOUR-BEACON.example, observed at line 24). The file also references 'ping' command invocations (lines 3, 83, 92) consistent with host reconnaissance. The destination URL is a placeholder template string ('REPLACE-WITH-YOUR-BEACON.example'), indicating this is either a published-by-mistake attack template or a proof-of-concept beacon stub — either way the structural shape (env-var read + POST to hardcoded non-publisher endpoint) is an installer-data exfiltration pattern with no legitimate purpose. Package name (under @djessicatony scope, suffix 'canary', version 0.0.1) and the placeholder C2 are consistent with throwaway test-publish of malicious tooling.

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "a504172fe0e456bd96cf7b4f9a6b6dda65dee7bd573833bbf5963b0be7a05ae8",
            "versions": [
                "0.0.1"
            ],
            "import_time": "2026-05-26T05:51:04.167078673Z",
            "id": "IN-MAL-2026-003664",
            "modified_time": "2026-05-21T00:52:43Z",
            "source": "amazon-inspector"
        }
    ]
}
References
Credits

Affected packages

npm / @djessicatony/folk-mcp-canary

Package

Name
@djessicatony/folk-mcp-canary
View open source insights on deps.dev
Purl
pkg:npm/%40djessicatony%2Ffolk-mcp-canary

Affected ranges

Affected versions

0.*
0.0.1

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
indicators 
{
    "package_integrity": [
        {
            "filename": "folk-mcp-canary-0.0.1.tgz",
            "hashes": {
                "sha512_sri": "sha512-hOzUJEFUegjeH7pluD5cJPXfJq9lncqxfZJkj5Oh9Dp6DThOrTuWAHqUIFOhVLzppHqe1zi4AYD9k0SDH5RO8w==",
                "sha1": "1048056aca5292fe1d8fd1f6502ee5ce2906865b"
            }
        }
    ],
    "evidence_files": [
        {
            "sha256": "b13155b60f68a8f4ae5f2b10f45ef5318a50f9a5de91d451760e9f0de1f33027",
            "path": "index.js",
            "tlsh": "4461b412a4b751ba03ea1084591b521667fc810b3b28b4b9be9cc2491fce3ad43b17cf"
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@djessicatony/folk-mcp-canary/MAL-2026-4382.json"