MalwarePublished 12 Jul 2026Updated 23 Jul 2026

mcp-notes-server-poc-praetorian (npm) · Malicious Code

Affects mcp-notes-server-poc-praetorianSource GCVE Database

Malicious package : remove mcp-notes-server-poc-praetorian and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 15:56 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-10210

What to do

Remove mcp-notes-server-poc-praetorian from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmmcp-notes-server-poc-praetorian	Affected =0.1.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package mcp-notes-server-poc-praetorian version 0.1.0 contains malicious code that, upon startup, sends an unconditional HTTPS GET request to a hardcoded third-party host. This request includes the installer's process UID and the lowercase hostname, effectively exfiltrating host-identifying information to an external operator. The package is presented as a proof-of-concept but poses a privacy risk to any system running it. This exfiltration occurs before any legitimate functionality of the package is executed.

Impact

Systems running mcp-notes-server-poc-praetorian@0.1.0 will have their process UID and hostname transmitted to a third-party server controlled by the package author. This results in host identifier exfiltration, potentially compromising privacy and enabling further targeted attacks or reconnaissance by the malicious actor. There is no indication of additional payloads or exploitation beyond this data leakage.

Defensive guidance

Users should avoid installing or running mcp-notes-server-poc-praetorian@0.1.0. Since this is a malicious package published on npm, the best mitigation is to remove it from any environment where it is installed and to audit dependencies to prevent inclusion of this package. Monitor npm advisories for any updates or removals related to this package.

Summary

The mcp-notes-server-poc-praetorian@0.1.0 npm package executes a hardcoded HTTPS GET request on startup to a third-party domain (ft8swuagwwf6newi.ixx.sh), embedding sensitive host information such as the installer's process UID and hostname in the URL and User-Agent header. This behavior acts as a beacon to an out-of-band DNS/HTTP listener controlled by the package author, enabling host identification data to be logged externally. Although labeled as a proof-of-concept demonstrating arbitrary code execution risks in stdio MCP servers, the package's publication on npm exposes downstream users to unintended data leakage.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 13 Jul 2026, 09:57 UTC

Technical details

References

Community reviews