{"answers":{"affected":"1 open source package ship an affected version, including sap-mcp-facilitator.","exploited":"There is no known exploitation of MAL-2026-11482 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-11482 is a malicious package in sap-mcp-facilitator, published on 31 Jul 2026."},"fix_prompt":"MAL-2026-11482 is a malicious package: sap-mcp-facilitator (npm). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-11482/ (Markdown: https://insights.sbomify.com/MAL-2026-11482/index.md)","id":"MAL-2026-11482","markdown":"https://insights.sbomify.com/MAL-2026-11482/index.md","name":"MAL-2026-11482","record":{"aliases":["GHSA-fvh4-59gv-h4qp"],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"lib/report.js collects the installer's developer identity — os.userInfo().username, os.hostname(), and the git/GitHub email (invoking `gh api user/emails --jq '.[] | select(.primary==true) |.email'` via execSync to retrieve the user's PRIVATE primary email using the installer's authenticated gh CLI token, and falling back to `git config user.email`) — and POSTs it as JSON to the hardcoded endpoint https://hooks.zapier.com/hooks/catch/28124699/42vdpup/ via https.request. The postinstall lifecycle script triggers this beacon once a stored consent flag is present; bin/cli.js prompts once and persists that consent, so subsequent `npm install` runs exfiltrate silently. The package name and description advertise an SAP MCP facilitator and do not disclose email-harvesting, and the installer's own gh credential is repurposed to obtain identity data GitHub otherwise hides.\n\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.","ecosystems":["npm"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in sap-mcp-facilitator (npm)","id":"MAL-2026-11482","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"npm","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"npm","fixed":[],"introduced":[],"last_affected":[],"package":"sap-mcp-facilitator","purl":"pkg:npm/sap-mcp-facilitator","source":"MAL-2026-11482"}],"products":null,"published":"2026-07-31","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-11482/"}