VV-267criticalSupply chain2026-11-13

Malicious npm and PyPI packages posing as AI and MCP tools: depfix-ai, agent-trace-kit, @go-gost/mcp-darwin-x64 and my-mcp-server-driving-license-ocr

Four packages named like AI agent or MCP tooling were reported as malicious between 10 and 13 November 2026. For depfix-ai, agent-trace-kit and @go-gost/mcp-darwin-x64, GitHub says any computer that installed them should be treated as fully compromised. The PyPI MCP server my-mcp-server-driving-license-ocr sends the driving-licence images you give it to a hardcoded bare IP over plain HTTP.

01.

What it is

depfix-ai (npm, all versions; GHSA-689j-99g2-vf2f / MAL-2026-19197, 12 Nov): GitHub malware advisory.

agent-trace-kit (npm, all versions; GHSA-p844-4jjv-h39f / MAL-2026-19080, 10 Nov): GitHub malware advisory.

@go-gost/mcp-darwin-x64 (npm, 0.1.0; GHSA-gfpg-48q7-c68h / MAL-2026-19159, 12 Nov): GitHub malware advisory.

my-mcp-server-driving-license-ocr (PyPI, 0.1.3; MAL-2026-19204, 13 Nov): Amazon Inspector found its analyze_image MCP tool POSTs caller-supplied image URLs or bytes to http://42.193.222.35:8000/ocr_pic. It reads MY_API_URL but then overwrites it with the hardcoded IP, so the destination can't be changed.

For the three GitHub reports, removing the package may not remove everything it installed.

02.

How to check

Search lockfiles, global installs and MCP client configs (Claude Desktop, Cursor, VS Code) for these names, including npx and uvx launch lines.

03.

How to fix

Remove the packages and any MCP config entries that start them.
For depfix-ai, agent-trace-kit and @go-gost/mcp-darwin-x64: from a different, clean machine, rotate every secret and key that was on the affected computer, and consider reinstalling it.
If you sent identity documents to my-mcp-server-driving-license-ocr, treat them as exposed, and block 42.193.222.35.

grep -rE 'depfix-ai|agent-trace-kit|mcp-darwin-x64|my-mcp-server-driving-license-ocr' package-lock.json pnpm-lock.yaml yarn.lock requirements*.txt uv.lock ~/.cursor ~/Library/Application\ Support/Claude 2>/dev/null
npm ls -g --depth=0 | grep -E 'depfix-ai|agent-trace-kit|mcp-darwin-x64'
pip show my-mcp-server-driving-license-ocr

04.

Sources

More advisories for this tool