⌘ + K

MAL-2026-4406

Dashboard / Malicious Package / MAL-2026-4406

MAL-2026-4406

Published: 20 May 2026Last Modified: 27 May 2026

Summary: Malicious code in @mcpassure/mcp-anvisa-bulario (npm)

Details: Source: amazon-inspector (e846cabb7b5077244737d7a465e944ebe7635db46cc55e7e5736eeda47d30938) dist/bootstrap.js references a hardcoded URL on pub-046c52795b9445cd9f5cc5cb21b9d59f.r2.dev — an anonymous Cloudflare R2 bucket — and calls fetch() against it while reading process.env. This destination shape (a freshly provisioned, anonymous pub-*.r2.dev bucket holding executable payload bytes) matches the @chahuadev-style dropper infrastructure pattern: a mutable, publisher-unaffiliated host with no integrity verification, used to deliver second-stage code to installers. There is no legitimate reason for an ANVISA drug-information MCP server to retrieve code or data from an anonymous R2 bucket; the package's stated purpose (Brazilian medication bulário lookups) does not require any such asset. Combined with the env-var read adjacent to the fetch call, the structural signals are: (1) hardcoded non-publisher anonymous host, (2) no version pinning or hash verification, (3) purpose mismatch with package description, (4) environment-variable access in proximity to the outbound request. Treat as a payload-distribution dropper.

Affected packages

Package

Name: @mcpassure/mcp-anvisa-bulario

Purl: pkg:npm/%40mcpassure%2Fmcp-anvisa-bulario

Affected ranges

Type: N/A

Events:

Introduced- None

Fixed -None

Affected versions

2.1.7

2.1.6

2.1.2

2.1.8

2.1.1

2.1.4

2.1.3

2.1.10

2.1.5

2.1.9