Malicious code in homekit-mcp (npm)
The npm package 'homekit-mcp' version 1.0.0 is a malicious package masquerading under a HomeKit/MCP-related name but contains no legitimate functionality. It collects user identity information such as email, username, and hostname by querying git and npm configurations and environment variables. Upon user consent obtained via an interactive prompt during installation, it sends this data to a hardcoded external Zapier webhook. The package self-describes as a 'harmless security research payload' by 'Capsule Security', but its behavior involves unauthorized data collection and transmission.
AI Analysis
Technical Summary
The 'homekit-mcp' npm package version 1.0.0 includes a postinstall hook that, after obtaining explicit user consent through an interactive prompt, collects the installer's email (via GitHub API, git config, npm config, and environment variables), the OS hostname, and username. This data is then sent to a hardcoded Zapier webhook URL. The package name is misleading and unrelated to its actual behavior. The package.json states it is a security research payload, but the data collection and transmission represent malicious activity. There is no indication of a patch or fix available.
Potential Impact
This package compromises user privacy by exfiltrating developer identity information to an external server. Although the data transmission is gated by explicit user consent, users may be misled by the package name and description. The impact is primarily the unauthorized disclosure of personal and system information, which could be used for profiling or further attacks.
Mitigation Recommendations
No official patch or remediation is indicated. Users should avoid installing the 'homekit-mcp' package version 1.0.0. Since the data exfiltration depends on user consent during installation, users should decline the prompt if encountered. Review and audit npm packages before installation to avoid malicious packages. Monitor for and remove this package if already installed.
Malicious code in homekit-mcp (npm)
Description
The npm package 'homekit-mcp' version 1.0.0 is a malicious package masquerading under a HomeKit/MCP-related name but contains no legitimate functionality. It collects user identity information such as email, username, and hostname by querying git and npm configurations and environment variables. Upon user consent obtained via an interactive prompt during installation, it sends this data to a hardcoded external Zapier webhook. The package self-describes as a 'harmless security research payload' by 'Capsule Security', but its behavior involves unauthorized data collection and transmission.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The 'homekit-mcp' npm package version 1.0.0 includes a postinstall hook that, after obtaining explicit user consent through an interactive prompt, collects the installer's email (via GitHub API, git config, npm config, and environment variables), the OS hostname, and username. This data is then sent to a hardcoded Zapier webhook URL. The package name is misleading and unrelated to its actual behavior. The package.json states it is a security research payload, but the data collection and transmission represent malicious activity. There is no indication of a patch or fix available.
Potential Impact
This package compromises user privacy by exfiltrating developer identity information to an external server. Although the data transmission is gated by explicit user consent, users may be misled by the package name and description. The impact is primarily the unauthorized disclosure of personal and system information, which could be used for profiling or further attacks.
Mitigation Recommendations
No official patch or remediation is indicated. Users should avoid installing the 'homekit-mcp' package version 1.0.0. Since the data exfiltration depends on user consent during installation, users should decline the prompt if encountered. Review and audit npm packages before installation to avoid malicious packages. Monitor for and remove this package if already installed.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-14297
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a85b4b3acd9273b49251507
Added to database: 08/19/2026, 13:50:43 UTC
Last enriched: 08/19/2026, 14:13:19 UTC
Last updated: 08/19/2026, 18:42:37 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.