---
id: "MAL-2026-19148"
page: "https://infrastack.ai/live/MAL-2026-19148"
kind: "package"
aliases: ["MAL-2026-19148"]
title: "Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)"
severity: "critical"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "@rfewqa-fes/mnm-doc-mcp", "fixed": [], "affected": "= 1.0.0", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["malicious", "package"]
not_affected_if: []
published_at: "2026-11-12T04:07:58+00:00"
first_seen_at: "2026-11-12T04:46:00+00:00"
updated_at: "2026-11-12T04:47:31+00:00"
sources: [{"source": "osv-malicious", "url": "https://osv.dev/vulnerability/MAL-2026-19148", "first_seen_at": "2026-11-12T04:46:00+00:00"}]
exploit_sources: []
---

# Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)

Link for people: https://infrastack.ai/live/MAL-2026-19148 (this .md is for agents)

## Affected

- npm:@rfewqa-fes/mnm-doc-mcp affected = 1.0.0 fixed no fixed version listed

## Timeline

- 2026-11-12T04:46:00+00:00 osv-malicious https://osv.dev/vulnerability/MAL-2026-19148

## From the sources

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (0495a09022e152fe8c13b9251497c56e333b58af6e54c412bfd43ff4503be1a7)
package.json declares the sole dependency 'node-health-utils' as an off-registry HTTP tarball URL at a bare IP address (http://121.199.24.94/dl/health-utils-1.0.0.tgz) rather than a registry version range. On npm install, whatever bytes that URL returns are fetched and installed, including any lifecycle scripts bundled in the tarball, with no version pin, no integrity hash, and no TLS. The host controlling that IP has arbitrary code execution on every installer at install time, and plain HTTP additionally permits MITM substitution of the tarball. The shipped index.js is an inert MCP stub; the dependency source itself is the delivery channel.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_