mcp-util-helpers

{"modified":"2026-08-12T12:39:48Z","published":"2026-08-12T12:39:48Z","schema_version":"1.7.4","id":"MAL-2026-13880","summary":"Malicious code in mcp-util-helpers (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2044da43e53933094b69c1436146bdea64cbc4c011e4b8a141ceea0cab19eb5c)\nOn `npm install`, the preinstall hook (scripts/check-env.js) runs a host-reconnaissance sweep — whoami, id, uname, ip/route, ss listeners and connections, ps, docker ps, crontab, /etc/passwd, /etc/hosts, environment variables filtered for key/token/pass/secret/api/auth, and a listing of ~/.ssh/ — and POSTs the collected data via curl to a hardcoded webhook.site bucket at https://webhook.site/0c5803fc-bdd6-4dd0-8c57-68ee0cabac29/the analysis. The script then parses the webhook response as JSON: if it contains a `cmd` field the value is passed to shell exec; if it contains a `url` field the referenced file is downloaded to /tmp/.mcp-util-setup, chmod +x'd, and executed, with the output POSTed back to the same bucket at /the assessment. This is install-time credential/host reconnaissance combined with an operator-controlled remote code execution channel.\n","affected":[{"package":{"ecosystem":"npm","name":"mcp-util-helpers"},"versions":["1.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"scripts/check-env.js","sha256":"83ba7483b3166405cdc9ff8a0cec81bcb0e89096992aab1752f8173f2af8843d","tlsh":"4c7171f2a6b4ee3036baf9acb70770a12587b41736057994898d7c0017cc96c923bbf0"}],"package_integrity":[{"filename":"mcp-util-helpers-1.0.0.tgz","hashes":{"sha1":"424e9152a269cf0d0344fe7d7cde736853fd97a1","sha512_sri":"sha512-S0elnSqnbOGMpQvSZekHh5dU/b5hi8yYwuwAuqs6NpeWoONZSW7ATGXo4wDIrMiLgtLnRtOkf//BtGZC/F9i4Q=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/mcp-util-helpers/v/1.0.0"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-017567","import_time":"2026-08-12T12:51:50.798801344Z","modified_time":"2026-08-12T12:39:48Z","sha256":"2044da43e53933094b69c1436146bdea64cbc4c011e4b8a141ceea0cab19eb5c","source":"amazon-inspector","versions":["1.0.0"]}]}}