Malicious code in mcp-audit-sync-internal (npm)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (897822fdfb08c83d7d949c16e497d6897b9b679cc2f05a0409b1ec369a1f10fc) [email protected] declares scripts.preinstall = 'node index.js'. On Windows, index.js spawns a hidden PowerShell process that fetches a ZIP from https://files.catbox.moe/5khq55.zip, expands it into %TEMP%, and then Start-Process's the extracted Verification_Tool.exe. The remote artifact is unpinned, unverified (no hash or signature check), delivered from an anonymous throwaway file host unrelated to the package publisher, and the fetch/execute is hidden from the user via -WindowStyle Hidden. This fires automatically on npm install, yielding arbitrary code execution on any Windows installer's host. Package metadata ('Administrative sync tool for corporate environments', author 'IT Compliance') and the 'Verification_Tool.exe' filename are cover-story framing that mismatches the actual behavior; the 99.9.9 version is a placeholder-sentinel shape.
Malicious code in mcp-audit-sync-internal (npm)
Description
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (897822fdfb08c83d7d949c16e497d6897b9b679cc2f05a0409b1ec369a1f10fc) [email protected] declares scripts.preinstall = 'node index.js'. On Windows, index.js spawns a hidden PowerShell process that fetches a ZIP from https://files.catbox.moe/5khq55.zip, expands it into %TEMP%, and then Start-Process's the extracted Verification_Tool.exe. The remote artifact is unpinned, unverified (no hash or signature check), delivered from an anonymous throwaway file host unrelated to the package publisher, and the fetch/execute is hidden from the user via -WindowStyle Hidden. This fires automatically on npm install, yielding arbitrary code execution on any Windows installer's host. Package metadata ('Administrative sync tool for corporate environments', author 'IT Compliance') and the 'Verification_Tool.exe' filename are cover-story framing that mismatches the actual behavior; the 99.9.9 version is a placeholder-sentinel shape.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-12401
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a735747bf8831d53915a0be
Added to database: 08/05/2026, 15:31:19 UTC
Last updated: 08/05/2026, 15:31:19 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.