npm

rce-poc-test-honor-mcp @1.0.0

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 1:32 PM UTC

Malicious

OSV ID

MAL-2025-49383

Ecosystem

npm

Summary

The package rce-poc-test-honor-mcp was found to contain malicious code.

Source: amazon-inspector (216f60aec8616ca96e607a879e30241ea807ed24fcb4b775afc5b8ef4d3f4a09)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.