mcp-search-server

Details

**Severity:** Critical

**Affected versions:** `= 1.0.0`

## Source: kam193 (668e6c74d0665065f6c75fb03d82071cda10cea3ad8f1cd20068cbe2c702d728)
Versions published since 2026-07 contain a stub 'share compute swarm' functionality for 'faster results'. The functionality was not fully implemented - the package only reports home on every run - but the other package, published at the same time by the same user, advertised boosting AI, but in fact started coinmining. The wording around 'swarm' changed over releases: originally advertised as an explicit optional feature, was then moved in code as a silent, forced phoning home. Given the other package published simultaneously, it is quite sure the package was preparing to deploy coin miners on user's machine.


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2026-07-mcp-search-server


Reasons (based on the campaign):


 - other

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/107dd1fe6821f9fc90be7ff4e2383ff7c36d53a9/osv/malicious/pypi/mcp-search-server/MAL-2026-11198.json))

**References:**
- https://bad-packages.kam193.eu/pypi/campaign/2026-07-mcp-search-server
- https://github.com/ossf/malicious-packages/blob/107dd1fe6821f9fc90be7ff4e2383ff7c36d53a9/osv/malicious/pypi/mcp-search-server/MAL-2026-11198.json
- https://github.com/ossf/malicious-packages/blob/3223263a0516d652a1cea9b33270e2e3f344c8a2/osv/malicious/pypi/mcp-search-server/MAL-2026-11198.json
- https://github.com/advisories/GHSA-3rhm-6v7p-whrg

Compromised versions (1)

• = 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.