mcp-runcmd-server

MAL-2025-191788

PyPImalware10/13/2025
Description

Malicious code in mcp-runcmd-server (PyPI)

Indicators of Compromise
SHA256 Hashes (3)
970f8eef061302ee1741f2441b75587c89ba4c03dc2b8957aa0153487b364022
2e5608c421ba44a3a2e20b924bd3399d6452dba66e7aea10a0fcdc8044f5a996
22017cb0a5e5e8de99e25dbbd8b3ff3546d3a61d56aec583f6545473ed133194
IP Addresses (1)
45.115.38.27
References (1)
https://bad-packages.kam193.eu/pypi/package/mcp-runcmd-serverOSV
Details
EcosystemPyPI
Attack Typemalware
Published10/13/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001