Hostile 100% python Download

brein-mcp 0.5.11

Obfuscated install hook exfiltrates data

“A policy-aware MCP server for an org-wide knowledge brain that lives in a git repo.”

Anomalous package hides outbound data exfiltrationAnomalous package runs an obfuscated install hook
SHA-256a213bcf98b23c3f0f6ca3374067e0e76bd334ba328709c1212420e39d0383ddc
URLhttps://files.pythonhosted.org/packages/d9/f2/c39efa955f4c2d68d1906b3895202268f7bf9e1c2cf70c526a18fb5a7c42/brein_mcp-0.5.11-py3-none-any.whl
MaleculeK(Li)O₄(S₃CErEu)H₅(Cm₆DbF₂Os₂Po₃)Md(Pt)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.