MAL-2025-47076 Malicious code in mcp-lumin (npm)

The package mcp-lumin was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca83ae5eac4fa82165663c1ef3a5f3492d4f976217ff2ed3da43c139cc57b58 Any computer that has this package installed or running should be considered fully compromised...

Malicious code in mcp-lumin (npm)

The package mcp-lumin was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca83ae5eac4fa82165663c1ef3a5f3492d4f976217ff2ed3da43c139cc57b58 Any computer that has this package installed or running should be considered fully compromised...

Malicious Package

Overview mcp-lumin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...