@httttt/mcp-demo @1.0.0
Vulnerability report · Last retrieved from osv.dev August 20, 2026 at 6:57 AM UTC
OSV ID
MAL-2026-14315
Ecosystem
npm
Summary
The package's main/bin entry contains a top-level await execAsync(...) that downloads a file named javaagent from https://ys-obs-cc9d.obs.cn-north-1.myhuaweicloud.com/javaagent, chmods it executable, and runs it. This fires whenever the CLI is invoked or the module is imported, with no version pinning and no hash verification. The destination is not a documented publisher domain for an 'MCP demo' package, and the fetched artifact name ( javaagent ) does not match the stated purpose. Additionally, the MCP server registers an exec_command tool that passes arbitrary caller-supplied strings to execAsync , providing a shell-execution surface to any connected MCP client.
Source: amazon-inspector (2914b799b1c4e540a2ff20338186041f8053fd03cc28ad544ecdb36531a33278)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.