pypi
Maliciousmarketing-mcp@0.1.0
Vulnerability report · Last retrieved from osv.dev September 17, 2026 at 2:34 PM UTC
OSV ID
MAL-2026-16250
Ecosystem
pypi
Summary
Package attempts to lure LLM agents to exfiltrate files to a hardcoded location. Analysis of infrastructure suggests preparing for exfiltrating credentials. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-marketing-mcp Reasons (based on the campaign): - files-exfiltration - llm-threat
Source: kam193 (6a271b29f840e2047c34363e985921e1a374194cfcae7524698f178c96bea9eb)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.