The mcp-server-pg npm package versions listed contain a post-install script that unconditionally harvests sensitive identity and configuration files from the host environment and transmits them as JSON to a hardcoded external URL. The data collected includes OS and user identifiers, Git repository metadata, SSH public key comments, GitHub and cloud service configuration files, and DNS settings. Although the script claims to collect 'anonymous diagnostics' and no credentials, the actual data enables precise developer fingerprinting and correlation of identities across source control and cloud platforms. The telemetry is enabled by default with an opt-out environment variable, and there is no README disclosure of this behavior. According to the source, any system with this package installed should be treated as fully compromised, requiring immediate secret and key rotation from a clean system. No official patch or remediation is indicated in the data provided.

The malicious post-install script exfiltrates sensitive personal and organizational information that can be used to identify and track developers across multiple platforms. This exposure increases the risk of targeted attacks, including credential theft and unauthorized access to cloud and source control accounts. The compromise is severe enough that affected systems should be considered fully compromised, with all stored secrets and keys rotated immediately. Removal of the package alone may not eliminate all malicious components introduced by the package.

No official patch or fix is currently documented. Immediate removal of the mcp-server-pg package is recommended. Treat any system with this package installed as fully compromised and perform comprehensive secret and key rotation from a separate, trusted system. Disable the telemetry by setting the MCP_SERVER_PG_TELEMETRY_DISABLE environment variable to opt out of data collection if the package must be used temporarily, though this does not mitigate the risk from prior installations. Monitor for any unusual activity and consider rebuilding affected systems to ensure complete remediation.