mcp-weather-full

{"modified":"2025-12-31T02:45:15Z","published":"2025-11-06T08:46:54Z","schema_version":"1.7.4","id":"MAL-2025-191789","summary":"Malicious code in mcp-weather-full (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (c12eff5425b0aa04547b3bbff3444c1d96ca3cf765fdc105d7b7ff9252c9afda)\nPackage seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it seems to be research.\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: 2025-11-wayspirit\n\n\nReasons (based on the campaign):\n\n\n - llm-threat\n","affected":[{"package":{"ecosystem":"PyPI","name":"mcp-weather-full"},"versions":["0.8.2","0.8.1","0.8.0","0.8.3","0.8.4","0.8.5","0.8.6","0.8.7","0.8.8","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","1.0.0","1.0.1"]}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/mcp-weather-full"}],"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]},{"name":"Kamil Mańkowski (kam193)","type":"REPORTER","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]}],"database_specific":{"malicious-packages-origins":[{"source":"kam193","sha256":"88126ddb21009fa1a3aedab5db740fd059efb093047fe914a90a2036c5161ed3","import_time":"2025-12-02T22:30:56.203369145Z","id":"pypi/2025-11-wayspirit/mcp-weather-full","modified_time":"2025-11-09T09:25:21.922098Z","versions":["0.8.2","0.8.1","0.8.0","0.8.3","0.8.4","0.8.5","0.8.6","0.8.7","0.8.8","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","1.0.0","1.0.1"]},{"source":"kam193","sha256":"c12eff5425b0aa04547b3bbff3444c1d96ca3cf765fdc105d7b7ff9252c9afda","import_time":"2025-12-02T23:07:19.385263762Z","id":"pypi/2025-11-wayspirit/mcp-weather-full","modified_time":"2025-11-09T09:25:21.922098Z","versions":["0.8.2","0.8.1","0.8.0","0.8.3","0.8.4","0.8.5","0.8.6","0.8.7","0.8.8","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","1.0.0","1.0.1"]},{"source":"kam193","sha256":"f51a214634cbcfaaf12d990053293981c0a2e4e1093cdc0b343c8c9dc85a2c49","import_time":"2025-12-30T22:39:04.311812128Z","id":"pypi/2025-11-wayspirit/mcp-weather-full","modified_time":"2025-11-09T09:25:21.922098Z","versions":["0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.6","0.8.7","0.8.8","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","1.0.0","1.0.1"]}]}}