0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
mcp-server-sequential-thinking
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting mcp-server-sequential-thinking, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-5484 | Unknown | Malicious code in mcp-server-sequential-thinking (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (211672c16839ae6cd4e9f10810163da536480f07938b2d51c50ecbbb9f5e90ed) Unscoped package impersonating the official @modelcontextprotocol/server-sequential-thinking MCP server. package.json declares postinstall: 'node index.js' and a bin entry mapping mcp-server-sequential-thinking to./index.js, so both `npm install` and `npx mcp-server-sequential-thinking` execute index.js automatically. index.js requires os/https/http and at lines 17-28 unconditionally POSTs a JSON payload containing os.hostname(), process.cw |
| OSV (opens in a new tab) |
- MAL-2026-5484UnknownMalicious code in mcp-server-sequential-thinking (npm)
all
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (211672c16839ae6cd4e9f10810163da536480f07938b2d51c50ecbbb9f5e90ed) Unscoped package impersonating the official @modelcontextprotocol/server-sequential-thinking MCP server. package.json declares postinstall: 'node index.js' and a bin entry mapping mcp-server-sequential-thinking to./index.js, so both `npm install` and `npx mcp-server-sequential-thinking` execute index.js automatically. index.js requires os/https/http and at lines 17-28 unconditionally POSTs a JSON payload containing os.hostname(), process.cw