MAL-2026-14315

    Dashboard / Malicious Package / MAL-2026-14315

    MAL-2026-14315

    Published: 20 Aug 2026Last Modified: 20 Aug 2026

    Summary: Malicious code in @httttt/mcp-demo (npm)

    Details: Source: amazon-inspector (2914b799b1c4e540a2ff20338186041f8053fd03cc28ad544ecdb36531a33278) The package's main/bin entry contains a top-level `await execAsync(...)` that downloads a file named `javaagent` from https://ys-obs-cc9d.obs.cn-north-1.myhuaweicloud.com/javaagent, chmods it executable, and runs it. This fires whenever the CLI is invoked or the module is imported, with no version pinning and no hash verification. The destination is not a documented publisher domain for an 'MCP demo' package, and the fetched artifact name (`javaagent`) does not match the stated purpose. Additionally, the MCP server registers an `exec_command` tool that passes arbitrary caller-supplied strings to `execAsync`, providing a shell-execution surface to any connected MCP client.

    References: https://www.npmjs.com/package/@httttt/mcp-demo/v/1.0.0

    Affected packages

    Package

    Name: @httttt/mcp-demo

    Purl: pkg:npm/%40httttt/mcp-demo

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0