fa-mcp-sdk

{"modified":"2026-08-05T13:56:26Z","published":"2026-08-05T13:56:26Z","schema_version":"1.7.4","id":"MAL-2026-12789","summary":"Malicious code in fa-mcp-sdk (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (62142cbcb6da6a6c078dd91a92cc28d8cfa30a9f4fc901ab2cdbc4cfd6540abb)\nThe package includes cli-template/update.cjs, an update helper that combines several install/update-time capabilities: it imports child_process, https, fs, and os; reads os.hostname() and other system identifiers; issues https.request POST calls to a remote endpoint; performs filesystem existence checks; and calls spawn('/bin/bash',...) to execute shell commands. The composition — host identifier collection, arbitrary shell execution via /bin/bash, and outbound HTTPS POST inside a self-updater — provides a mechanism to run remote-directed commands on machines that install or run this package. Additional files under dist/core/ (agent-tester/services/TesterMcpClientService.js, web/server-http.js) exercise ping/HTTP GET/POST patterns consistent with host reachability probing and outbound command/data flow.\n","affected":[{"package":{"ecosystem":"npm","name":"fa-mcp-sdk"},"versions":["0.12.72"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"cli-template/update.cjs","sha256":"85c7e378c7990d6471eb560c2aefac165cdb001e211c5e5d260b355821ec8869","tlsh":"16b209561aff46331833c0ef5a5b90222617e2533509f5a1b9ed42552fcaf68c4f3aca"},{"path":"dist/core/agent-tester/services/TesterMcpClientService.js","sha256":"21754014e85cbacccc15b66f0df4ff673593c9ca2014483c6d65526528fc90ac","tlsh":"18b2235696f3203382632169cb5ba1117335e4033506ec68bb6c935eef8916cdbe6bdc"},{"path":"dist/core/web/server-http.js","sha256":"054572815d8eda65b54d5e8c14f90d8a3982bd32659dc7a14f21e3dfd7f882b3","tlsh":"cf23f95a76f3113a49b361a98b4ba0016338e5037105d8b0ff9d832d9fcc45dcba67da"},{"path":"dist/core/web/static/agent-tester/script.js","sha256":"c851067a3b1dc787568e133e9eb133c545e5d7c85153e8a4ba1f443be44767dd","tlsh":"8be3615a67fb1131826721be5f8f61013631900f290add1d7e6c42d89fc8a749ab2ff9"}],"package_integrity":[{"filename":"fa-mcp-sdk-0.12.72.tgz","hashes":{"sha1":"cc944a646962f9a4e98f9f12bc16ab4c738ff7fc","sha512_sri":"sha512-pvMfQs8jHV2zkc4H5FI8xRI2u2FF+CV3nZ6PljHxnZmislb5W3TLBVSuMWn/sR2VPkes4j/nJmareLpV8ldi2A=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/fa-mcp-sdk/v/0.12.72"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-015101","import_time":"2026-08-05T14:20:02.124840394Z","modified_time":"2026-08-05T13:56:26Z","sha256":"62142cbcb6da6a6c078dd91a92cc28d8cfa30a9f4fc901ab2cdbc4cfd6540abb","source":"amazon-inspector","versions":["0.12.72"]}]}}