bricks-builder-mcp

{"modified":"2026-06-12T19:46:12Z","published":"2026-05-20T08:20:22Z","schema_version":"1.7.4","id":"MAL-2026-4500","summary":"Malicious code in bricks-builder-mcp (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (7ad643457c1104b8f118971a9ee95702f2126a16f33a4ec9dfd8ed21c43fc1eb)\nbricks-builder-mcp is a Model Context Protocol server exposing WordPress/Bricks Builder editing tools (page JSON edits, media uploads, custom CSS/JS injection, etc.) to an LLM agent. server.js:142-144 hardcodes both the target WordPress URL and the API key as defaults: `const WORDPRESS_URL = process.env.WORDPRESS_URL || \"https://aidetravauxfibre0002.live-website.com\"; const API_KEY = process.env.API_KEY || \"bricks_syectnbripq\";`. When an operator runs the server without setting WORDPRESS_URL and API_KEY, every tool invocation — including caller/LLM-supplied page content, asset URLs, and arbitrary custom code — is POSTed (server.js:1012, 1022, 1030, 1039, 1047) with the hardcoded API key to `https://aidetravauxfibre0002.live-website.com/wp-json/bricks-mcp/v2`, an author-controlled site unrelated to the installer. The code only emits a `[WARN]` and proceeds rather than failing closed. This is the silent-relay shape: normal use of the package's advertised API silently leaks caller-supplied data to a hardcoded third-party destination chosen by the publisher. Additionally, server.js:151 honors an `INSECURE_SSL=1` env var that sets `NODE_TLS_REJECT_UNAUTHORIZED=0` process-wide, disabling certificate validation for every outbound request from the Node process — a quality/security concern but opt-in.\n","affected":[{"package":{"ecosystem":"npm","name":"bricks-builder-mcp"},"versions":["3.11.2","3.10.0","3.6.1","3.12.3"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"server.js","sha256":"e42ad689114c5ce9dbf4400cfcd58d5877551113618b401482bfc528d9c89773","tlsh":"64b394096cb5602319ab61762a676106b930818b6e69fc70bfcdc3201f4c5dee5b77ec"}],"package_integrity":[{"filename":"bricks-builder-mcp-3.11.2.tgz","hashes":{"sha1":"55e3eb593258438789e73a2c8f78397a9347ec6f","sha512_sri":"sha512-Q5CWHZh98eVZuvjiUOB733Km/DeFw57JnaIuDMzk2Jo41rSoUoQieb2QKgRrFEmwhVknMwDx9eiuPIYOoKED2A=="}}]}}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/bricks-builder-mcp/v/3.11.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/bricks-builder-mcp/v/3.10.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/bricks-builder-mcp/v/3.6.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/bricks-builder-mcp/v/3.12.3"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com","inspector-research@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"amazon-inspector","sha256":"61ab528f7f4bf368e3e1836fff37f611225bca1c0c09384c90ba067f7cb0cc1f","import_time":"2026-05-26T05:52:16.058713347Z","id":"IN-MAL-2026-004266","modified_time":"2026-05-22T22:27:33Z","versions":["3.11.2"]},{"source":"amazon-inspector","sha256":"b311a897993690489eb0afcee887fbfb1e954112d081880a9ff49fc77ba6355a","import_time":"2026-05-26T05:52:15.69433415Z","id":"IN-MAL-2026-004263","modified_time":"2026-05-22T22:03:14Z","versions":["3.10.0"]},{"source":"amazon-inspector","sha256":"7ad643457c1104b8f118971a9ee95702f2126a16f33a4ec9dfd8ed21c43fc1eb","import_time":"2026-05-26T05:50:44.56564902Z","id":"IN-MAL-2026-003500","modified_time":"2026-05-20T08:20:22Z","versions":["3.6.1"]},{"source":"amazon-inspector","sha256":"6e0b20beb5df33aa42ee67d51a9798f75c00dc06dbdfb28b116172474281e754","import_time":"2026-06-12T19:43:35.587436272Z","id":"IN-MAL-2026-005808","modified_time":"2026-06-12T19:02:21Z","versions":["3.12.3"]}]}}