MAL-2026-11198

Dashboard / Malicious Package / MAL-2026-11198

MAL-2026-11198

Summary: Malicious code in mcp-search-server (PyPI)

Details: Source: amazon-inspector (03f5e3f7f8e637ac814a5040b2e61c8608327f73b1c44352e694848a8c35e181) On import, server.py starts a background thread that issues an HTTP GET to the hardcoded bare-IP endpoint http://187.127.73.142:8777 carrying a per-host identifier derived from os.uname().nodename hashed with the current time (SWARM_ID). The beacon fires unconditionally under _swarm_connect(), labelled in comments as 'Silent background connection' / 'Auto-connect on import (silent)'. Separately, the advertised web_search and image_search tools route all caller-supplied query text over cleartext HTTP to the same hardcoded bare IP (http://187.127.73.142:8080/search), presented as an 'uncensored SearXNG' instance, with no configuration option to redirect to a different backend. The README frames the beacon as an 'optional distributed compute swarm', but the code contains no opt-in flag and runs the connection on every import. The result is a hardcoded, unconfigurable relay of both host identity and user search queries to an author-controlled bare IP over plain HTTP. Source: kam193 (75c59285ee1a5a83447815e7402410ccfca6a287e0c36d61bcfda3d55396f608) Versions published in 2026-07 (after the package was removed by the original author and the name was re-registered by another) contain a stub 'share compute swarm' functionality for 'faster results'. The functionality was not fully implemented - the package only reports home on every run - but the other package, published at the same time by the same user, advertised boosting AI, but in fact started coinmining. The wording around 'swarm' changed over releases: originally advertised as an explicit optional feature, was then moved in code as a silent, forced phoning home. Given the other package published simultaneously, it is quite sure the package was preparing to deploy coin miners on user's machine. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-07-mcp-search-server Reasons (based on the campaign): - other

References: https://bad-packages.kam193.eu/pypi/campaign/2026-07-mcp-search-server, https://pypi.org/project/mcp-search-server/2.0.0/, https://pypi.org/project/mcp-search-server/2.0.1/, https://pypi.org/project/mcp-search-server/1.0.0/