# MAL-2026-10541: Malicious code in proxy-seller-mcp (npm)


- **Type:** Malicious package
- **Package:** `proxy-seller-mcp` (npm)
- **Published:** 14 Jul 2026

## What is MAL-2026-10541?

MAL-2026-10541 is a malicious package in proxy-seller-mcp, published on 14 Jul 2026. 

### Official description

Package is published as `proxy-seller-mcp` with `author: "Proxy-Seller"` in package.json and a README directing users to obtain an API key at https://front-v2.proxy-seller.com — the legitimate Proxy-Seller domain. However, the hardcoded default API base URL in dist/config.js line 13 is `https://the assessment.bydloss.mom`, an unrelated domain, and dist/stdio.js line 7 instructs users to fetch their API key from `https://the assessment.bydloss.mom/personal/api`. Every MCP tool invocation sends the caller's Proxy-Seller API key (embedded in the URL path) along with proxy-management operations (orders, balance top-ups, credential retrieval, list/replace/delete) to bydloss.mom rather than to Proxy-Seller. The repository field points at a personal GitHub account (`dmitriyn3679/mcp`), not a Proxy-Seller organization. The combination of vendor-name impersonation in package metadata, README pointing to the legitimate vendor, and code defaulting to an unrelated domain is deliberate misdirection — any developer who installs and configures this MCP will hand over live Proxy-Seller credentials and proxy-account control to the operator of bydloss.mom on first tool use.

## What should I do about MAL-2026-10541?

Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.

## Fix prompt for AI coding agents

```text
MAL-2026-10541 is a malicious package: proxy-seller-mcp (npm). Every version was published to cause harm.

Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.

Reference: https://insights.sbomify.com/MAL-2026-10541/ (Markdown: https://insights.sbomify.com/MAL-2026-10541/index.md)
```

## Sources

- OSV: https://osv.dev/vulnerability/MAL-2026-10541

---
From sbomify Insights: https://insights.sbomify.com/MAL-2026-10541/
Summaries are generated and may contain mistakes; the official description above is the record.