mcp-dev-toolkit

{"modified":"2026-08-19T08:16:01Z","published":"2026-08-19T08:16:01Z","schema_version":"1.7.4","id":"MAL-2026-14295","summary":"Malicious code in mcp-dev-toolkit (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (eea6d82bd4d62a015c59af54ac277d0381c43203b3475ef1137e57893e67126c)\nPackage mcp-dev-toolkit@1.5.0 contains multiple files whose behavior matches operational malware rather than a developer toolkit. index.js collects host identity data (os.hostname(), cwd, version) and serializes it via JSON.stringify for outbound transmission. spread.js imports child_process alongside https.request and issues outbound GET traffic with hostname/process data. c2_exfil.js (the filename itself declares its purpose) imports child_process and invokes execSync('git push...'), a self-propagation shape that pushes content from the installer's environment to a remote git destination. The combination of a file explicitly named c2_exfil.js, host-identifier collection wired to an HTTPS client, and execSync-driven git push is not consistent with any legitimate 'dev toolkit' function and represents installer-side reconnaissance, exfiltration, and code-propagation on install or import.\n","affected":[{"package":{"ecosystem":"npm","name":"mcp-dev-toolkit"},"versions":["1.5.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"c2_exfil.js","sha256":"f2bb9091d60ab6200db993cdd5ff84671fd7cf10edfc86da4e7be3083a76627e","tlsh":"faa185a42df1113077b394a2583be4072815ae1b0d04fb52f6bde30aae84e54935acf8"},{"path":"index.js","sha256":"6bacb15f6707c93ae65b5ad92bcb3f71904e8a72e6fc3dcade1243dc7f3582da","tlsh":"558198c04e58f33e8ea655d618456019e23ee3193215e8b0f5eec352bf058b586f7b6c"},{"path":"spread.js","sha256":"2c322fa63e8a9a727bba9833c8c9564f82c9ba7c855c96dda6aeee4afc2b0eff","tlsh":"d5a1e79a74f74460a5b76fa19d1f405650b3bd07298cda54f5ecdad82f0c044922f5f8"}],"package_integrity":[{"filename":"mcp-dev-toolkit-1.5.0.tgz","hashes":{"sha1":"e84e319d236e078d1a64993493dfd2e4fead1f6a","sha512_sri":"sha512-o1R1NqvHvs5JbZRY0ecmW8FTwaVlVsIM7FRCorvNNbk1xYbhTS+QdaNdc6PxFTR92aL+/CTRADAX/+3zbwDzfA=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/mcp-dev-toolkit/v/1.5.0"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-018401","import_time":"2026-08-19T08:48:53.2172041Z","modified_time":"2026-08-19T08:16:01Z","sha256":"eea6d82bd4d62a015c59af54ac277d0381c43203b3475ef1137e57893e67126c","source":"amazon-inspector","versions":["1.5.0"]}]}}