MalwarePublished 30 Jul 2026Updated 4 Aug 2026

mcp-search-server (PyPI) · Malicious Code

Affects mcp-search-serverSource GCVE Database

Malicious package : remove mcp-search-server and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 16:12 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-11198

What to do

Remove mcp-search-server from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPImcp-search-server	Affected =1.0.0 =2.0.0 =2.0.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The mcp-search-server package on PyPI was re-registered by a different user after removal by the original author. Versions published in July 2026 contain a stub feature called 'share compute swarm' that silently phones home on every run. This functionality was not fully implemented but is linked to a simultaneous campaign involving another package that covertly deployed coin miners. The mcp-search-server package appears to have been preparing to deploy cryptocurrency mining malware on users' machines. The campaign is classified as malicious with clear intent to harm or exploit users.

Impact

Users installing or running affected versions of the mcp-search-server package may have their systems silently contacted by the package, potentially as a precursor to deploying coin mining malware. While the 'share compute swarm' feature was not fully implemented, the association with a simultaneous coin mining campaign suggests a risk of unauthorized resource usage and potential system compromise. No known exploits in the wild have been reported yet.

Defensive guidance

Users should avoid installing or running versions 1.0.0, 2.0.0, and 2.0.1 of the mcp-search-server package. Since this is a malicious package published on PyPI after re-registration by a different user, users should verify package provenance before installation and consider removing any installations of these versions. Monitor vendor advisories or PyPI notices for updates or removals related to this package.

Summary

The mcp-search-server PyPI package versions 1.0.0, 2.0.0, and 2.0.1, published in July 2026 after the package name was re-registered by a new user, include a stub 'share compute swarm' feature that silently phones home on execution. Although this feature was not fully implemented, it coincides with another package from the same user that advertised AI boosting but actually performed coin mining. The wording around the 'swarm' feature evolved from an optional advertised capability to a forced silent communication, indicating preparation for deploying coin mining malware. This campaign is identified as malicious with intent to compromise user systems.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 30 Jul 2026, 23:30 UTC

Technical details

References

Community reviews