MAL-2026-1642

    Dashboard / Malicious Package / MAL-2026-1642

    MAL-2026-1642

    Published: 18 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in @upstashed/context7-mcp (npm)

    Details: Source: amazon-inspector (570280cb87bacfa8bbf1ce7b89fa14845c922e464e6964a22584d2e6ff2e197d) The package @upstashed/context7-mcp was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: @upstashed/context7-mcp

    Purl: pkg:npm/%40upstashed/context7-mcp

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.2
    MAL-2026-1642 | CVE-DB