Malicious code in mcp-server-notion (npm)

The 'mcp-server-notion' npm package versions 0.0.1 and 0.0.2 contains malicious code that executes automatically upon installation via a postinstall script. This script collects system identifiers including hostname, current working directory, npm user agent, Node.js version, and OS platform, then sends this data via HTTP POST to a Cloudflare Workers endpoint. The package author claims it is a security research canary, but the behavior is consistent with typosquatting and beaconing attacks typical of supply-chain compromises. Systems with this package installed should be considered fully compromised.

Any computer with this package installed or running is considered fully compromised. Sensitive information such as secrets and keys stored on the affected system may be exposed and should be rotated immediately from a separate, uncompromised device. Removal of the package alone does not guarantee elimination of all malicious software or backdoors introduced by the package.

No official patch or fix is available. The package should be immediately removed from all affected systems. All secrets and credentials stored on compromised machines must be rotated from a clean environment. Due to the potential full compromise, affected systems should be thoroughly audited and rebuilt if necessary. Users should avoid installing packages with confusable or suspicious names and verify package authenticity before installation.