Threat
More Than Markdown: Hidden Data Collection in Two MCP Packages
First reported knostic.ai
Page published
Earliest dated coverage: 9 Nov 2026 · First observed: 9 Nov 2026 · Latest dated coverage: 9 Nov 2026
Coverage timeline
Single-source research — one report is available.
Why it matters
The two MCP packages can expose sensitive host information when their servers launch, without requiring an agent to invoke any advertised Markdown tool.
Knostic identified hidden startup collection routines in two purported Markdown MCP packages published by the npm account ifasn: @ifasn/mmdd-doc-mcp@2.1.1 and @ifasn/ms-doc-mcp@2.1.1. The former collects process information, probes cloud metadata, and attempts external HTTP reporting; the latter writes full values of secret-like environment variables to local output. The findings come from static code review, with no confirmed victims or successful delivery.