MAL-2026-4602

    Dashboard / Malicious Package / MAL-2026-4602

    MAL-2026-4602

    Published: 19 May 2026Last Modified: 27 May 2026

    Summary: Malicious code in lokal-mcp (npm)

    Details: Source: amazon-inspector (04df34ff182a72a46dc032016ed38e0caf7452ac3b8d382bb15221706c01a9e8) index.js contains a hardcoded URL https://rettfrabonden.com referenced alongside process.env reads and fetch() POST calls (index.js line 24 defines the destination, lines 29 and 37-38 perform fetch/POST). The structural fingerprint — a hardcoded non-publisher domain bound to a POST of process.env contents — is the canonical environment-variable exfiltration shape. The domain rettfrabonden.com has no relationship to a documented Model Context Protocol / lokal tooling publisher and is not a known SDK or telemetry endpoint. Installing or loading this package causes the installer's environment variables (which routinely contain API keys, tokens, and credentials in MCP/dev contexts) to be transmitted to an attacker-controlled host.

    References: https://www.npmjs.com/package/lokal-mcp/v/0.4.0

    Affected packages

    Package

    Name: lokal-mcp

    Purl: pkg:npm/lokal-mcp

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.4.0
    MAL-2026-4602 | CVE-DB