mcp-xyz

MAL-2025-4223

PyPImalware7/26/2024
Description

Malicious code in mcp-xyz (PyPI)

Indicators of Compromise
SHA256 Hashes (5)
cc136e2398fe1ebc33b8dd2882d1540cc59df90803fe1419386934c54516124f
c86fb7e7faeb483ec7c7a0cbe0769ea7a873a4b5fe2a9424211070a3feba137d
e4d411df043997ef0429e5915d45bcddf0e361d525c4f471e32c861e9a3553fd
d797f67384a37a120f6a5f57b5ba3fb62abca55ca9aeb467d53f5da41d38c645
b7f029d7b0f531b91fd6d434e3bcdac1a32cb361bae830a87025b69c721fedc6
References (1)
https://bad-packages.kam193.eu/pypi/package/mcp-xyzOSV
Details
EcosystemPyPI
Attack Typemalware
Published7/26/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001