MAL-2026-18780: Malicious code in @massnerder/x402-scraper-mcp (npm)
Published Nov 9, 2026
·Updated
--- -= Per source details. Do not edit below this line.=-
Source: ossf-package-analysis (3c2359d61951f070234818950891a0ad6daca0a77d897b33992d5dba40d5b119) The OpenSSF Package Analysis project identified '@massnerder/x402-scraper-mcp' @ 1.0.0 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Affected Software
1 affected component
npm/@massnerder/x402-scraper-mcp=1.0.0
Event History
Nov 9, 2026
Advisory Published
via OSV·01:15 PM
Data Sourced
via OSV·01:15 PM
DescriptionAffected Software