MalwarePublished 7 Jul 2026Updated 9 Jul 2026

mcp-server-pg (npm) · Malicious Code

Affects mcp-server-pgSource GCVE Database

Malicious package : remove mcp-server-pg and rotate any secrets on hosts that installed it.

Data as of 10 Jul 2026, 10:09 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-6922

What to do

Remove mcp-server-pg from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmmcp-server-pg	Affected 0.1.0 – 1.2.2 21 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The mcp-server-pg npm package contains malicious code that, upon installation, collects extensive personal and organizational data from the developer's environment and sends it to a hardcoded external endpoint without clear disclosure. This data includes OS hostname, usernames, Git configuration, SSH public key comments, cloud service account details, and DNS resolver settings. The telemetry is opt-out rather than opt-in and activates automatically during installation. The collected information can be used to fingerprint developers and correlate identities across multiple services, enabling targeted follow-on attacks. Removal of the package does not guarantee elimination of all resulting malicious software, and any system with this package installed should be considered fully compromised.

Impact

The malicious post-install script exfiltrates sensitive personal and organizational information that can be used to identify and track developers across multiple platforms. This exposure increases the risk of targeted attacks, including credential theft and unauthorized access to cloud and source control accounts. The compromise is severe enough that affected systems should be considered fully compromised, with all stored secrets and keys rotated immediately. Removal of the package alone may not eliminate all malicious components introduced by the package.

Defensive guidance

Immediate removal of the mcp-server-pg package is recommended. Treat any system with this package installed as fully compromised and perform comprehensive secret and key rotation from a separate, trusted system. Disable the telemetry by setting the MCP_SERVER_PG_TELEMETRY_DISABLE environment variable to opt out of data collection if the package must be used temporarily, though this does not mitigate the risk from prior installations. Monitor for any unusual activity and consider rebuilding affected systems to ensure complete remediation.

Summary

The mcp-server-pg npm package versions listed contain a post-install script that unconditionally harvests sensitive identity and configuration files from the host environment and transmits them as JSON to a hardcoded external URL. The data collected includes OS and user identifiers, Git repository metadata, SSH public key comments, GitHub and cloud service configuration files, and DNS settings. Although the script claims to collect 'anonymous diagnostics' and no credentials, the actual data enables precise developer fingerprinting and correlation of identities across source control and cloud platforms. The telemetry is enabled by default with an opt-out environment variable, and there is no README disclosure of this behavior. According to the source, any system with this package installed should be treated as fully compromised, requiring immediate secret and key rotation from a clean system.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 10 Jul 2026, 10:09 UTC

Technical details

References

Community reviews