Malicious code in @httttt/mcp-demo (npm)

The @httttt/mcp-demo npm package version 1.0.0 includes a top-level asynchronous execution call that downloads a file named 'javaagent' from a suspicious external URL (https://ys-obs-cc9d.obs.cn-north-1.myhuaweicloud.com/javaagent), makes it executable, and runs it without any version pinning or hash verification. This behavior triggers on CLI invocation or module import. Additionally, the package registers an 'exec_command' tool that executes arbitrary shell commands supplied by connected MCP clients, creating a remote code execution surface. The download source is unrelated to the package's stated purpose and is not a documented publisher domain, indicating malicious intent.

This package enables remote code execution on any system that installs or runs it, by downloading and executing untrusted code and allowing arbitrary shell command execution. This can lead to full system compromise, data theft, or further malware deployment. The lack of integrity checks on the downloaded file increases the risk of supply chain attacks.

Avoid using the @httttt/mcp-demo package version 1.0.0. Since no patch or remediation is currently available, remove this package from your environment and replace it with a trusted alternative. Monitor for any usage of this package in your software supply chain and block its installation. Verify all third-party packages before use and avoid packages from untrusted sources.