logo

Database

Use of software with malware In mcp-runcommand-server

Description

Malicious code in mcp-runcommand-server (PyPI)

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version

Aliases

1. OSV-MAL-2025-1916472. GCVE-MAL-2025-191647

References

1. https://research.jfrog.com/post/3-malicious-mcps-pypi-reverse-shell2. https://bad-packages.kam193.eu/pypi/package/mcp-runcommand-server

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.