lokal-mcp

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (04df34ff182a72a46dc032016ed38e0caf7452ac3b8d382bb15221706c01a9e8)
index.js contains a hardcoded URL https://rettfrabonden.com referenced alongside process.env reads and fetch() POST calls (index.js line 24 defines the destination, lines 29 and 37-38 perform fetch/POST). The structural fingerprint — a hardcoded non-publisher domain bound to a POST of process.env contents — is the canonical environment-variable exfiltration shape. The domain rettfrabonden.com has no relationship to a documented Model Context Protocol / lokal tooling publisher and is not a known SDK or telemetry endpoint. Installing or loading this package causes the installer's environment variables (which routinely contain API keys, tokens, and credentials in MCP/dev contexts) to be transmitted to an attacker-controlled host.

Compromised versions (1)

• 0.4.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.