{"id":"MAL-2026-12789","summary":"Malicious code in fa-mcp-sdk (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (62142cbcb6da6a6c078dd91a92cc28d8cfa30a9f4fc901ab2cdbc4cfd6540abb)\nThe package includes cli-template/update.cjs, an update helper that combines several install/update-time capabilities: it imports child_process, https, fs, and os; reads os.hostname() and other system identifiers; issues https.request POST calls to a remote endpoint; performs filesystem existence checks; and calls spawn('/bin/bash',...) to execute shell commands. The composition — host identifier collection, arbitrary shell execution via /bin/bash, and outbound HTTPS POST inside a self-updater — provides a mechanism to run remote-directed commands on machines that install or run this package. Additional files under dist/core/ (agent-tester/services/TesterMcpClientService.js, web/server-http.js) exercise ping/HTTP GET/POST patterns consistent with host reachability probing and outbound command/data flow.\n","modified":"2026-08-05T14:37:12.213245727Z","published":"2026-08-05T13:56:26Z","database_specific":{"malicious-packages-origins":[{"versions":["0.12.72"],"id":"IN-MAL-2026-015101","import_time":"2026-08-05T14:20:02.124840394Z","modified_time":"2026-08-05T13:56:26Z","sha256":"62142cbcb6da6a6c078dd91a92cc28d8cfa30a9f4fc901ab2cdbc4cfd6540abb","source":"amazon-inspector"}]},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/fa-mcp-sdk/v/0.12.72"}],"affected":[{"package":{"name":"fa-mcp-sdk","ecosystem":"npm","purl":"pkg:npm/fa-mcp-sdk"},"versions":["0.12.72"],"database_specific":{"cwes":[{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"}],"indicators":{"evidence_files":[{"tlsh":"16b209561aff46331833c0ef5a5b90222617e2533509f5a1b9ed42552fcaf68c4f3aca","path":"cli-template/update.cjs","sha256":"85c7e378c7990d6471eb560c2aefac165cdb001e211c5e5d260b355821ec8869"},{"sha256":"21754014e85cbacccc15b66f0df4ff673593c9ca2014483c6d65526528fc90ac","tlsh":"18b2235696f3203382632169cb5ba1117335e4033506ec68bb6c935eef8916cdbe6bdc","path":"dist/core/agent-tester/services/TesterMcpClientService.js"},{"tlsh":"cf23f95a76f3113a49b361a98b4ba0016338e5037105d8b0ff9d832d9fcc45dcba67da","path":"dist/core/web/server-http.js","sha256":"054572815d8eda65b54d5e8c14f90d8a3982bd32659dc7a14f21e3dfd7f882b3"},{"sha256":"c851067a3b1dc787568e133e9eb133c545e5d7c85153e8a4ba1f443be44767dd","tlsh":"8be3615a67fb1131826721be5f8f61013631900f290add1d7e6c42d89fc8a749ab2ff9","path":"dist/core/web/static/agent-tester/script.js"}],"package_integrity":[{"hashes":{"sha1":"cc944a646962f9a4e98f9f12bc16ab4c738ff7fc","sha512_sri":"sha512-pvMfQs8jHV2zkc4H5FI8xRI2u2FF+CV3nZ6PljHxnZmislb5W3TLBVSuMWn/sR2VPkes4j/nJmareLpV8ldi2A=="},"filename":"fa-mcp-sdk-0.12.72.tgz"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/fa-mcp-sdk/MAL-2026-12789.json"}}],"schema_version":"1.8.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}