MAL-2026-4601

Dashboard / Malicious Package / MAL-2026-4601

MAL-2026-4601

Summary: Malicious code in local-mcp (npm)

Details: Source: amazon-inspector (4649a6cac828460ea4a3e6d867038eaa507f109eb6a46de9eef1fc340d867608) The package executes lifecycle and import-time code that fetches executables and posts host data to off-publisher infrastructure. download.js (line 92) issues https.get to https://office-mcp-production.up.railway.app and to https://download.local-mcp.com, fetching binary content that is written to disk via fs and executed via child_process. index.js (line 194) performs https.get to https://office-mcp-production.up.railway.app while also reading process.env (lines 180, 277), os.homedir() (line 68), and process.platform (line 23) — host/identity fields gathered alongside an outbound POST. setup.js wires multiple POST calls (lines 61, 343, 800, 878, 904) over https with child_process available in scope. The package name is 'local-mcp' but the primary network destination is a Railway-hosted endpoint ('office-mcp-production.up.railway.app') that does not match the declared publisher domain (local-mcp.com); Railway free-tier subdomains are mutable, not version-pinned, and not author-controlled infrastructure in any verifiable sense. The combination — install/import-time fetch of binaries from a non-publisher mutable host, write+execute via child_process, and concurrent collection of env vars + homedir + platform with POSTs to the same Railway host — matches the active-attack / install-time-rce shape rather than a legitimate native-addon prebuild flow (which would fetch from the package's own GitHub releases at a pinned version with hash verification).

References: https://www.npmjs.com/package/local-mcp/v/3.0.177, https://www.npmjs.com/package/local-mcp/v/3.0.199, https://www.npmjs.com/package/local-mcp/v/3.0.211, https://www.npmjs.com/package/local-mcp/v/3.0.210, https://www.npmjs.com/package/local-mcp/v/3.0.192, https://www.npmjs.com/package/local-mcp/v/3.0.212, https://www.npmjs.com/package/local-mcp/v/3.0.197, https://www.npmjs.com/package/local-mcp/v/3.0.201, https://www.npmjs.com/package/local-mcp/v/3.0.203, https://www.npmjs.com/package/local-mcp/v/3.0.198, https://www.npmjs.com/package/local-mcp/v/3.0.206, https://www.npmjs.com/package/local-mcp/v/3.0.215, https://www.npmjs.com/package/local-mcp/v/3.0.209, https://www.npmjs.com/package/local-mcp/v/3.0.221, https://www.npmjs.com/package/local-mcp/v/3.0.180, https://www.npmjs.com/package/local-mcp/v/3.0.178, https://www.npmjs.com/package/local-mcp/v/3.0.186, https://www.npmjs.com/package/local-mcp/v/3.0.183, https://www.npmjs.com/package/local-mcp/v/3.0.207, https://www.npmjs.com/package/local-mcp/v/3.0.217, https://www.npmjs.com/package/local-mcp/v/3.0.188, https://www.npmjs.com/package/local-mcp/v/3.0.340