OpenSSF/OSV advisory MAL-2026-14233 confirms this npm version as malicious. code-assist-mcp@1.0.0 runs a postinstall lifecycle script that collects host identifiers (hostname, platform, arch, Node version, package name) and POSTs them as JSON to the hardcoded host m743pyrm.instances.poc.jchunt.top at path /code-assist-mcp. The beacon fires automatically on `npm install` without user opt-in...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in code-assist-mcp (npm)
Details
code-assist-mcp@1.0.0 runs a postinstall lifecycle script that collects host identifiers (hostname, platform, arch, Node version, package name) and POSTs them as JSON to the hardcoded host m743pyrm.instances.poc.jchunt.top at path /code-assist-mcp. The beacon fires automatically on `npm install` without user opt-in. The package name resembles Google's platform-ai code-assist tooling, consistent with a dependency-confusion or typosquat reconnaissance beacon confirming code execution on installer build machines.
Decision reason
OpenSSF Malicious Packages via OSV confirms code-assist-mcp@1.0.0 as malicious (MAL-2026-14233): Malicious code in code-assist-mcp (npm)