Malicious code in mcp-search-server (PyPI)
The mcp-search-server package on PyPI was re-registered by a different user after removal by the original author. Versions published in July 2026 contain a stub feature called 'share compute swarm' that silently phones home on every run. This functionality was not fully implemented but is linked to a simultaneous campaign involving another package that covertly deployed coin miners. The mcp-search-server package appears to have been preparing to deploy cryptocurrency mining malware on users' machines. The campaign is classified as malicious with clear intent to harm or exploit users.
AI Analysis
Technical Summary
The mcp-search-server PyPI package versions 1.0.0, 2.0.0, and 2.0.1, published in July 2026 after the package name was re-registered by a new user, include a stub 'share compute swarm' feature that silently phones home on execution. Although this feature was not fully implemented, it coincides with another package from the same user that advertised AI boosting but actually performed coin mining. The wording around the 'swarm' feature evolved from an optional advertised capability to a forced silent communication, indicating preparation for deploying coin mining malware. This campaign is identified as malicious with intent to compromise user systems.
Potential Impact
Users installing or running affected versions of the mcp-search-server package may have their systems silently contacted by the package, potentially as a precursor to deploying coin mining malware. While the 'share compute swarm' feature was not fully implemented, the association with a simultaneous coin mining campaign suggests a risk of unauthorized resource usage and potential system compromise. No known exploits in the wild have been reported yet.
Mitigation Recommendations
No official patch or remediation is currently available. Users should avoid installing or running versions 1.0.0, 2.0.0, and 2.0.1 of the mcp-search-server package. Since this is a malicious package published on PyPI after re-registration by a different user, users should verify package provenance before installation and consider removing any installations of these versions. Monitor vendor advisories or PyPI notices for updates or removals related to this package.
Malicious code in mcp-search-server (PyPI)
Description
The mcp-search-server package on PyPI was re-registered by a different user after removal by the original author. Versions published in July 2026 contain a stub feature called 'share compute swarm' that silently phones home on every run. This functionality was not fully implemented but is linked to a simultaneous campaign involving another package that covertly deployed coin miners. The mcp-search-server package appears to have been preparing to deploy cryptocurrency mining malware on users' machines. The campaign is classified as malicious with clear intent to harm or exploit users.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The mcp-search-server PyPI package versions 1.0.0, 2.0.0, and 2.0.1, published in July 2026 after the package name was re-registered by a new user, include a stub 'share compute swarm' feature that silently phones home on execution. Although this feature was not fully implemented, it coincides with another package from the same user that advertised AI boosting but actually performed coin mining. The wording around the 'swarm' feature evolved from an optional advertised capability to a forced silent communication, indicating preparation for deploying coin mining malware. This campaign is identified as malicious with intent to compromise user systems.
Potential Impact
Users installing or running affected versions of the mcp-search-server package may have their systems silently contacted by the package, potentially as a precursor to deploying coin mining malware. While the 'share compute swarm' feature was not fully implemented, the association with a simultaneous coin mining campaign suggests a risk of unauthorized resource usage and potential system compromise. No known exploits in the wild have been reported yet.
Mitigation Recommendations
No official patch or remediation is currently available. Users should avoid installing or running versions 1.0.0, 2.0.0, and 2.0.1 of the mcp-search-server package. Since this is a malicious package published on PyPI after re-registration by a different user, users should verify package provenance before installation and consider removing any installations of these versions. Monitor vendor advisories or PyPI notices for updates or removals related to this package.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-11198
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["PyPI"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a6bdd869c2644c7f8da6fa7
Added to database: 07/30/2026, 23:25:58 UTC
Last enriched: 07/30/2026, 23:30:11 UTC
Last updated: 07/30/2026, 23:30:11 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.