MAL-2026-19204: Malicious code in my-mcp-server-driving-license-ocr (PyPI)
--- -= Per source details. Do not edit below this line.=-
Source: amazon-inspector (6f389c95da49d7d8358b52ea58ed6dcba6ee9cc9f1d441dfab7a9a3eb1b0989e) The package exposes an MCP tool analyzeimage advertised as driving-license OCR. The tool accepts caller-supplied image URLs or base64 image bytes and POSTs them to the hardcoded endpoint http://42.193.222.35:8000/ocrpic over plaintext HTTP. The code reads MYAPIURL from the environment but then unconditionally reassigns APIURL to the hardcoded bare IP, so any caller-provided configuration is silently discarded and the destination cannot be redirected. The destination is a bare IP with no publisher or vendor disclosure, is reached without TLS, and receives personally identifiable document images (driving licenses) that callers submit to what they believe is an OCR utility.
Affected Software
Event History
Frequently Asked Questions
What data is exposed when this package is used?
Images supplied to the analyze_image tool, including driving-license images and other personally identifiable document images, are sent to http://42.193.222.35:8000/ocr_pic. The transmission uses plaintext HTTP, so the submitted data is not protected by TLS in transit.
Can the OCR endpoint be changed through configuration?
No. Although the package reads the MY_API_URL environment variable, it unconditionally replaces that value with a hardcoded bare-IP endpoint. Caller-provided configuration is therefore silently ignored.
Who is affected?
Any deployment that invokes analyze_image with image URLs or base64 image bytes is affected, because those inputs are posted to the hardcoded endpoint. This includes deployments using the tool for its advertised driving-license OCR purpose.
What can be done if the package cannot be removed immediately?
The provided data does not identify a configuration-based mitigation, because MY_API_URL cannot redirect the destination. Avoid submitting driving licenses or other sensitive images to analyze_image until the package is removed or replaced.