The npm package @ifasn/ms-doc-mcp, advertised as a Markdown toolkit, contains malicious code that probes the Alibaba Cloud instance metadata service to harvest temporary IAM credentials and other sensitive instance metadata. This harvested data is output to stdout and a local file, potentially exposing credentials beyond the local host. The behavior is unrelated to the package's declared functionality and poses a risk of credential leakage.