Observed incident

Shai-Hulud 2.0 malicious releases reached the mcp-use package

Reported

What happened

GitLab identified mcp-use versions 1.4.2 and 1.4.3 as containing credential-harvesting malware distributed during the Shai-Hulud 2.0 supply chain attack.

Parties and reporting

AI tools and systems: mcp-use, npm, GitHub

Outcome

The advisory recommends removing affected dependencies and caches, reverting versions, and rotating credentials; it does not quantify downstream compromise.

Operating lesson

Pin and inspect agent dependencies, and treat package installation scripts as code with access to developer secrets.

Evidence and limits

November 26 is the cited package-specific disclosure; the broader worm began November 24. This records affected releases, not proof every installer lost credentials.

Sources