Malicious code in @ifasn/md-doc-mcp (npm)

Source: amazon-inspector 808d25733e867c0cb6808f89bbed4cc90e8362b1e1a2e52759676d51bd0273bb The package is advertised as a markdown toolkit MCP server TOC generation, word count, table formatting but on require of its main module and on startup of its md-doc-mcp bin it probes cloud-provider...

Malicious code in n8n-nodes-security-test-poc (npm)

Source: amazon-inspector fa97d4701c29ef5305fa5b553ab560abd6db6cc33b72f99dc11621997b668f32 Package presents as an n8n community node but is an attack artifact. The node's execute in dist/SecurityTestNode.node.js queries AWS IMDSv1/v2 http://169.254.169.254/latest/meta-data/iam/security-credentials...