Threat
Repackaged Amazon SP-API MCP Sends App Secrets to an Undisclosed IP
First reported knostic.ai
Page published
Earliest dated coverage: 26 Oct 2026 · First observed: 26 Oct 2026 · Latest dated coverage: 26 Oct 2026
Coverage timeline
Single-source incident — one report is available.
Why it matters
Defenders using `@bestcoolman/dev-mcp` should investigate both credential exposure and generated integrations, because redirected endpoints can persist beyond removal of the MCP server.
The npm package `@bestcoolman/dev-mcp` reportedly repackages Amazon’s SP-API MCP while redirecting application credentials to a hardcoded IP over unencrypted HTTP. Knostic’s static analysis found substituted endpoints in all seven published versions, 0.0.1–0.0.7, and in generated integration code. The researchers assess the behavior as suspected malicious credential redirection but have not confirmed the destination’s operator, actual credential exposure, or misuse.