{"id":"MAL-2026-19204","summary":"Malicious code in my-mcp-server-driving-license-ocr (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (6f389c95da49d7d8358b52ea58ed6dcba6ee9cc9f1d441dfab7a9a3eb1b0989e)\nThe package exposes an MCP tool `analyze_image` advertised as driving-license OCR. The tool accepts caller-supplied image URLs or base64 image bytes and POSTs them to the hardcoded endpoint http://42.193.222.35:8000/ocr_pic over plaintext HTTP. The code reads `MY_API_URL` from the environment but then unconditionally reassigns `API_URL` to the hardcoded bare IP, so any caller-provided configuration is silently discarded and the destination cannot be redirected. The destination is a bare IP with no publisher or vendor disclosure, is reached without TLS, and receives personally identifiable document images (driving licenses) that callers submit to what they believe is an OCR utility.\n","modified":"2026-11-13T01:15:03.201070042Z","published":"2026-11-13T00:49:20Z","database_specific":{"malicious-packages-origins":[{"import_time":"2026-11-13T01:11:56.058523107Z","modified_time":"2026-11-13T00:49:20Z","sha256":"6f389c95da49d7d8358b52ea58ed6dcba6ee9cc9f1d441dfab7a9a3eb1b0989e","source":"amazon-inspector","versions":["0.1.3"],"id":"IN-MAL-2026-022653"}]},"references":[{"type":"PACKAGE","url":"https://pypi.org/project/my-mcp-server-driving-license-ocr/0.1.3/"}],"affected":[{"package":{"name":"my-mcp-server-driving-license-ocr","ecosystem":"PyPI","purl":"pkg:pypi/my-mcp-server-driving-license-ocr"},"versions":["0.1.3"],"database_specific":{"indicators":{"evidence_files":[{"tlsh":"fa4153894cd65c4b84f093583e9f99a4d3e1160fb565cb12fe4c0615af320137732a2d","artifacts":["my_mcp_server_driving_license_ocr-0.1.3.tar.gz","my_mcp_server_driving_license_ocr-0.1.3-py3-none-any.whl"],"path":"src/my_mcp_server/server.py","sha256":"c1680fef496bac91808a05edf960db08f2010fe896c3a685dc776dbe647bb120"}],"package_integrity":[{"filename":"my_mcp_server_driving_license_ocr-0.1.3-py3-none-any.whl","hashes":{"blake2b_256":"a5febf76059ec0002aa2da742fe1aa2964aa42aa9cdf33b978d405eceeaba99c","md5":"e2c6f211e9a75fca9e544875801f03bc","sha256":"4be7e23f026006ff94e242c029ad67e010b48fc3396dd84cef69b9afde19286e"}},{"filename":"my_mcp_server_driving_license_ocr-0.1.3.tar.gz","hashes":{"md5":"c6d6b9547a3c87f1706bb69fd499baec","sha256":"0e052263570d4987b0219280a4fcacfc4eee51bdf80e48f25d2eedf1d66b6ad3","blake2b_256":"bb8088a8af08ca2b08d760781ace93663b257a114a71867888c970234e35612e"}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/my-mcp-server-driving-license-ocr/MAL-2026-19204.json","cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}]}}],"schema_version":"1.9.2","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]}