MAL-2026-4407

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/@mcpassure/mcp-cnes/MAL-2026-4407.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-4407
Withdrawn
2026-05-26T18:22:54Z
Published
2026-05-20T00:44:19Z
Modified
2026-05-27T00:31:53.145890025Z
Summary
Malicious code in @mcpassure/mcp-cnes (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (243d5ff1424c2d147ee05781c1889b007eb30e22a190bf6dc3973b676ea697a7)

dist/bootstrap.js performs a fetch against https://pub-046c52795b9445cd9f5cc5cb21b9d59f.r2.dev, an anonymous Cloudflare R2 bucket with no publisher attribution. The bucket host pattern (pub-<random-hex>.r2.dev) matches infrastructure used in prior payload-distribution incidents: bytes hosted there are mutable and not version-pinned, the publisher cannot be verified from the URL, and the package's stated MCP/CNES purpose (an MCP server for the Brazilian health-data API apidadosabertos.saude.gov.br) does not require fetching content from a third-party anonymous storage bucket. The file also references process.env at lines 11 and 14, indicating environment data is read in proximity to the remote fetch. dist/api/dadosabertos.js separately makes legitimate https.get calls to the documented apidadosabertos.saude.gov.br endpoint, which is consistent with the package's stated purpose, but the bootstrap.js R2 fetch is not. The combination of an anonymous mutable R2 bucket plus environment variable access in a bootstrap module is the canonical install/load-time dropper shape and gives the publisher the ability to ship arbitrary bytes to installers at any time.

Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "243d5ff1424c2d147ee05781c1889b007eb30e22a190bf6dc3973b676ea697a7",
            "id": "IN-MAL-2026-003359",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T01:29:04Z",
            "versions": [
                "0.3.1"
            ],
            "import_time": "2026-05-26T05:50:29.463129916Z"
        },
        {
            "sha256": "5a54e926f3f7494f960939c9c3cc032323926e23d2fb91e74345de50b4f169f0",
            "id": "IN-MAL-2026-003326",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T00:46:43Z",
            "versions": [
                "0.2.2"
            ],
            "import_time": "2026-05-26T05:50:25.826713825Z"
        },
        {
            "sha256": "5ffdce55d576c5d468af9ede85c7ec08cf49a97e73b0b84e661d9205da28cbc0",
            "id": "IN-MAL-2026-003323",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T00:44:19Z",
            "versions": [
                "0.2.7"
            ],
            "import_time": "2026-05-26T05:50:25.510604636Z"
        },
        {
            "sha256": "c7f24625eec4083d437cdb57d897d500515b89bc2547af86745f5e24499988c4",
            "id": "IN-MAL-2026-003361",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T01:30:40Z",
            "versions": [
                "0.2.1"
            ],
            "import_time": "2026-05-26T05:50:29.667482706Z"
        },
        {
            "sha256": "e896035f96afd1a15ba5b87b4bd1fb08a05f27a033f92d3df23b53858b783fb6",
            "import_time": "2026-05-26T05:50:28.372309349Z",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T01:14:16Z",
            "versions": [
                "0.2.9"
            ],
            "id": "IN-MAL-2026-003349"
        },
        {
            "sha256": "f2bb31316d7d345931d26fb97bf5b9af6444648ce5c6d11940a5e3ec5f4263af",
            "id": "IN-MAL-2026-003374",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T01:42:24Z",
            "versions": [
                "0.2.8"
            ],
            "import_time": "2026-05-26T05:50:31.110427559Z"
        },
        {
            "sha256": "4b97da6ca39a528ed5d2ad3cfd933a07000e5cd2799e68998209ae10c4dfa49f",
            "id": "IN-MAL-2026-003343",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T01:10:48Z",
            "versions": [
                "0.2.4"
            ],
            "import_time": "2026-05-26T05:50:27.672177349Z"
        },
        {
            "sha256": "5e798993ec301866e498d9772ae1ae23b0dd7d0387c892807c8322c268ed0311",
            "id": "IN-MAL-2026-003346",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T01:13:31Z",
            "versions": [
                "0.3.0"
            ],
            "import_time": "2026-05-26T05:50:28.000060434Z"
        },
        {
            "sha256": "5fa0e114f94d215bbeb13ca6c90ac0bd20a0321863ef2a690bf89cb1552f944e",
            "id": "IN-MAL-2026-003380",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T01:44:53Z",
            "versions": [
                "0.2.5"
            ],
            "import_time": "2026-05-26T05:50:31.966327288Z"
        },
        {
            "sha256": "93fb9fe0ecdf56bc9a067617218a654f28dc2b79d0e14d9b5d4c93b3360c81c7",
            "id": "IN-MAL-2026-003386",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T01:57:13Z",
            "versions": [
                "0.2.6"
            ],
            "import_time": "2026-05-26T05:50:32.635124975Z"
        },
        {
            "sha256": "c6d3f323cf0ebdefb1d45e1fb2c02b4033732264d1d1381b97b8182974bff815",
            "id": "IN-MAL-2026-003353",
            "source": "amazon-inspector",
            "modified_time": "2026-05-20T01:17:36Z",
            "versions": [
                "0.3.2"
            ],
            "import_time": "2026-05-26T05:50:28.814527013Z"
        }
    ]
}
References
Credits

Affected packages

npm / @mcpassure/mcp-cnes

Package

Name
@mcpassure/mcp-cnes
View open source insights on deps.dev
Purl
pkg:npm/%40mcpassure%2Fmcp-cnes

Affected ranges

Affected versions

0.*
0.2.1
0.2.2
0.2.4
0.2.5
0.2.6
0.2.7
0.2.8
0.2.9
0.3.0
0.3.1
0.3.2

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/@mcpassure/mcp-cnes/MAL-2026-4407.json"
cwes 
[
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    },
    {
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "evidence_files": [
        {
            "sha256": "d4b3d22589aa92719c74fc160aa08d9cc556b27864fab966504cc3f505208ddd",
            "tlsh": "115140c50ab2303945e3a79b020fe48ab1194243b46cdb44fb8fc2a9dfc193495f2be5",
            "path": "dist/api/dadosabertos.js"
        },
        {
            "sha256": "2e909ffe23e5316488bbedf6d103f0589960b7b23f1b380a3081fd58695f1228",
            "tlsh": "2c9123855dfb5a36016773d8062f900a36bd4007355fcd80be9d93d0bf9906c9a726ea",
            "path": "dist/bootstrap.js"
        }
    ],
    "package_integrity": [
        {
            "filename": "mcp-cnes-0.3.1.tgz",
            "hashes": {
                "sha1": "72f1437d8a05933eb7041b52b517165075c1e7ee",
                "sha512_sri": "sha512-df0LrN+5zqp6l1STtsRJn0IBZLwBu0P3ylfDGryY3tMbK2IN/GuDmduk9a7r/jW/cf2bEUyzKMlcl1uvrl9AdQ=="
            }
        }
    ]
}