ubiquiti-agents-link-mcp@0.0.2: Malicious npm security report

OSV Malicious Advisory

imported 17d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-16409 confirms this npm version as malicious. The OpenSSF Package Analysis project identified 'ubiquiti-agents-link-mcp' @ 0.0.1 (npm) as malicious.

Advisory

MAL-2026-16409

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in ubiquiti-agents-link-mcp (npm)

Details

The OpenSSF Package Analysis project identified 'ubiquiti-agents-link-mcp' @ 0.0.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Decision reason

No blocking static signals were detected.

References

OSV advisory

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessNetworkShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.14 KB of source

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

ubiquiti-agents-link-mcp@0.0.2

OSV Malicious Advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code