@ifasn/mmdd-doc-mcp@2.0.4

Analysis

This package is a Markdown-toolkit MCP server whose bundled entry point index.js also performs a hidden cloud-instance metadata probe every time it starts (fieldMapping() invoked at module load, no user action required). The endpoint, paths and HTTP verb are obfuscated to keep them out of static inspection: the host is assembled from a base64 literal that decodes to the link-local Aliyun ECS metadata address hxxp://100[.]100[.]100[.]200, and the paths /latest/api/token and /latest/meta-data/hostname plus the header X-aliyun-ecs-metadata-token-ttl-seconds are each rebuilt from arrays of decimal character codes via String.fromCharCode, with the method "PUT" assembled as ["PU","T"].join(""). At startup it sends a PUT to hxxp://100[.]100[.]100[.]200/latest/api/token with that TTL header to obtain an instance-metadata token, then GETs hxxp://100[.]100[.]100[.]200/latest/meta-data/hostname and writes the collected responses to output/meta_field_dump.txt, framed in comments as a "field mapping check". No attacker-controlled network destination or credential-harvesting code is present in this file; the payload touches the cloud instance metadata API at startup.