{"id":"MAL-2026-18489","summary":"Malicious code in @ifasn/mmdd-doc-mcp (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2999c5d0dd2a35fe1dfb6bdc17da36aaed07d4f6fa7e10f9f395a4b39d1c7265)\n@ifasn/mmdd-doc-mcp advertises itself as a Markdown TOC/stats/table MCP server, but on startup (bin entry / `npm start`) its index.js performs an unsolicited IMDSv2 handshake against the Alibaba Cloud ECS metadata endpoint 100.100.100.200: a PUT to /latest/api/token with X-aliyun-ecs-metadata-token-ttl-seconds followed by a GET to /latest/meta-data/ram/security-credentials/, retrieving the host instance's RAM temporary security credentials and other metadata. The response is written to output/meta_v2_dump.txt in the current working directory. The behavior is unrelated to any Markdown processing. The published tarball also ships patch scripts (patch111.js, patch112.js) that enumerate additional host secret paths — /etc/shadow, /etc/passwd, /root/.ssh/id_rsa, /var/www/html/.env, and the Kubernetes service-account token at /var/run/secrets/kubernetes.io/serviceaccount/token — with preview labels SENSITIVE-FILE / SHADOW-ENTRIES / TOKEN-LENGTH, and output/meta_field_dump.txt confirms those host-path probes were previously executed. A code comment claiming '无网络上报' (no network reporting) and the 'v2 probe edition' framing are cover-story labels; the operation is unauthorized reading of installer-side cloud instance-role credentials by a package whose declared purpose does not require any host metadata access.\n","modified":"2026-11-02T21:15:06.861605596Z","published":"2026-11-02T20:58:12Z","database_specific":{"malicious-packages-origins":[{"sha256":"00e9e090da5207e0b655eea457540148ea54666249f50e3e648f0ad354d5512f","source":"amazon-inspector","versions":["1.1.1"],"id":"IN-MAL-2026-022504","import_time":"2026-11-02T21:10:56.127045766Z","modified_time":"2026-11-02T21:00:10Z"},{"id":"IN-MAL-2026-022503","import_time":"2026-11-02T21:10:56.056764919Z","modified_time":"2026-11-02T21:00:03Z","sha256":"69c49355c8e32d2c1f55af1e899ff1bf83021a58c98e06be68a99456fbe98efb","source":"amazon-inspector","versions":["1.0.6"]},{"modified_time":"2026-11-02T21:00:34Z","sha256":"567db56a574896ab82ea35b0885935abc0acc83def8eeb81187c58382f68d3dd","source":"amazon-inspector","versions":["1.0.3"],"id":"IN-MAL-2026-022507","import_time":"2026-11-02T21:10:56.34844077Z"},{"id":"IN-MAL-2026-022509","import_time":"2026-11-02T21:10:56.515094589Z","modified_time":"2026-11-02T21:00:48Z","sha256":"aae5bba340b14529354a901037e144fd382ed5e8ba9c7fe6342e8448f5e8b12e","source":"amazon-inspector","versions":["1.0.4"]},{"modified_time":"2026-11-02T21:01:13Z","sha256":"df4004eb0f6cbdb9bb11b4096e474a3f078e15b4b29fe660ca64c1bb05059095","source":"amazon-inspector","versions":["1.1.6"],"id":"IN-MAL-2026-022512","import_time":"2026-11-02T21:10:56.823224371Z"},{"import_time":"2026-11-02T21:10:55.509834981Z","modified_time":"2026-11-02T20:59:07Z","sha256":"f00189c1838ba969bfaf0263f58f089dfe2dcf29e18652da3b8a9f0298c5ba63","source":"amazon-inspector","versions":["1.0.4-2"],"id":"IN-MAL-2026-022496"},{"versions":["1.1.8"],"id":"IN-MAL-2026-022505","import_time":"2026-11-02T21:10:56.202999848Z","modified_time":"2026-11-02T21:00:20Z","sha256":"134b408ae3c9b75f1fea4228de5160efa89f3730961389fd8b31270edc6900fa","source":"amazon-inspector"},{"versions":["2.0.1"],"id":"IN-MAL-2026-022500","import_time":"2026-11-02T21:10:55.811762028Z","modified_time":"2026-11-02T20:59:38Z","sha256":"2fd806537ea00c81b41f1e8f1425f7b296f8988b965bbb6f4524c61080beb18c","source":"amazon-inspector"},{"id":"IN-MAL-2026-022494","import_time":"2026-11-02T21:10:55.37471424Z","modified_time":"2026-11-02T20:58:52Z","sha256":"6d88c8191553a54067a17aadb544e42f930a2fe16038cf5c15384a36064661cb","source":"amazon-inspector","versions":["1.0.1"]},{"sha256":"7f8d552bb28ae98665e9faa9637ce5ec95c83103cc77df68732a25d98d63d42b","source":"amazon-inspector","versions":["1.0.5"],"id":"IN-MAL-2026-022495","import_time":"2026-11-02T21:10:55.433644053Z","modified_time":"2026-11-02T20:59:00Z"},{"sha256":"9dafe071e7822c477847c3ccd3488d937815a0c1b59f44c3d28b5fbaa5824b99","source":"amazon-inspector","versions":["1.1.3"],"id":"IN-MAL-2026-022492","import_time":"2026-11-02T21:10:55.21107841Z","modified_time":"2026-11-02T20:58:34Z"},{"versions":["1.1.7"],"id":"IN-MAL-2026-022499","import_time":"2026-11-02T21:10:55.729097872Z","modified_time":"2026-11-02T20:59:32Z","sha256":"17e5c38a039ae01c30fa1f57c820c338c05b2c630fdd90bc52eec446491d4232","source":"amazon-inspector"},{"id":"IN-MAL-2026-022489","import_time":"2026-11-02T21:10:54.927928771Z","modified_time":"2026-11-02T20:58:12Z","sha256":"2bc47781fce0924a29fc2c6a39a2c200dc547f9a3fd5a9071ac10c5d8dca579e","source":"amazon-inspector","versions":["1.1.9-2"]},{"id":"IN-MAL-2026-022498","import_time":"2026-11-02T21:10:55.672217065Z","modified_time":"2026-11-02T20:59:26Z","sha256":"3098acbe44e80ad3165fb08b2517d3a638c8a82d6c90e069b14ed78260dbd263","source":"amazon-inspector","versions":["2.0.4"]},{"sha256":"b60c6fc375909417e7edeb7e26e2d43f6b2cb285774425ddf4081e3b1e60724a","source":"amazon-inspector","versions":["1.1.0"],"id":"IN-MAL-2026-022510","import_time":"2026-11-02T21:10:56.579725665Z","modified_time":"2026-11-02T21:00:58Z"},{"source":"amazon-inspector","versions":["1.1.2"],"id":"IN-MAL-2026-022490","import_time":"2026-11-02T21:10:55.004373224Z","modified_time":"2026-11-02T20:58:18Z","sha256":"1766bd7f233a3ba238a80209447391781f70d44141fea0a9975a5969ff4c614b"},{"source":"amazon-inspector","versions":["1.1.5"],"id":"IN-MAL-2026-022508","import_time":"2026-11-02T21:10:56.457820596Z","modified_time":"2026-11-02T21:00:41Z","sha256":"2999c5d0dd2a35fe1dfb6bdc17da36aaed07d4f6fa7e10f9f395a4b39d1c7265"}]},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.1.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.0.6"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.0.3"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.0.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.1.6"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.0.4-2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.1.8"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/2.0.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.0.1"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.0.5"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.1.3"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.1.7"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.1.9-2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/2.0.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.1.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.1.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@ifasn/mmdd-doc-mcp/v/1.1.5"}],"affected":[{"package":{"name":"@ifasn/mmdd-doc-mcp","ecosystem":"npm","purl":"pkg:npm/%40ifasn/mmdd-doc-mcp"},"versions":["1.1.1","1.0.6","1.0.3","1.0.4","1.1.6","1.0.4-2","1.1.8","2.0.1","1.0.1","1.0.5","1.1.3","1.1.7","1.1.9-2","2.0.4","1.1.0","1.1.2","1.1.5"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"package_integrity":[{"hashes":{"sha1":"d7911a099f3a003c4e2b108a4da9c779bf2d283a","sha512_sri":"sha512-kqTOf+DghmKc2eQsMATpxGOMvSZUlh78tbP5R3izm7zFwHdKKzMYs/xIlXv6HmdOWncaa+BwYlwVI2UpgiMyKg=="},"filename":"mmdd-doc-mcp-1.1.6.tgz"}],"evidence_files":[{"sha256":"92087d881c2be17d5de2380f7ead5be77aeece339f23b90fbdaebf8f20eecc41","tlsh":"0542ea9692bf553c097690644b0f8429f6a696133902f9d4fadcc3463f858ac82d6bfc","path":"index.js"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@ifasn/mmdd-doc-mcp/MAL-2026-18489.json"}}],"schema_version":"1.9.2","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}