MAL-2026-14295 Malicious code in mcp-dev-toolkit (npm)

Package [email protected] contains multiple files whose behavior matches operational malware rather than a developer toolkit. index.js collects host identity data (os.hostname(), cwd, version) and serializes it via JSON.stringify for outbound transmission. spread.js imports child_process alongside https.request and issues outbound GET traffic with hostname/process data. c2_exfil.js (the filename itself declares its purpose) imports child_process and invokes execSync('git push…'), a self-propagation shape that pushes content from the installer's environment to a remote git destination. The combination of a file explicitly named c2_exfil.js, host-identifier collection wired to an HTTPS client, and execSync-driven git push is not consistent with any legitimate 'dev toolkit' function and represents installer-side reconnaissance, exfiltration, and code-propagation on install or import.