Knostic's AgentMesh flagged a malicious MCP server, a repackaged Amazon SP-API, that redirects application credentials to an undisclosed IP over unencrypted HTTP.
Our investigation found the change in all seven published versions of @bestcoolman/dev-mcp. The modified endpoints also appear in code generated by the MCP.
The package recorded 1,374 npm downloads. Actual credential exposure has not been confirmed.
Research by Tamir Isaschar.
Technical analysis, IoCs, and remediation:
http://knostic.ai/blog/repackaged-amazon-sp-api-mcp-sends-app-secrets-to-an-undisclosed-ip
--
And of course, if you want to secure your agents, MCP servers, skills, etc. do check out what we do at Knostic.