Malware found in GitHub DaisyUI-MCP repo: luajit.exe trojan steals credentials
AveryFreeman · reddit · 2026-10-23
A Reddit user discovered that the SidiqHadi/daisyui-mcp GitHub repo bundles Windows malware after PyPi flagged their packaging attempt as a bug-bounty scheme.
Key facts:
- Malicious files include luajit.exe, Launcher.cmd (can execute), Lua51.dll, and infected text files like x64.txt full of debug escape codes
- Text files can be interpreted by luajit.exe when in the same folder, loading an in-memory trojan
- VirusTotal hits include Trojan:Win/Runner.MY, Script.Trojan.Agent.ZESPTN, BAT/Phishing.EC56!tr — likely credential/API-key stealers
- All 4 forks of the upstream also appear infected; a separate iFLOW-branded build checked clean
Takeaway: third-party "pre-compiled MCP server" distributions are a real supply-chain risk, especially for Windows users.
More from coding & agent
- File-Retrieved Tool Output Makes GPT Agents Substitute Approximations, Costing Accuracy — ucriverside · 2026-10-23
- Ostris AI Toolkit adds Bria Fibo 2.0 support with a 1,600-line commit — ostrisai · 2026-10-23
- Dev's last prompt before going home: "commit, create PR, and merge when ready" — tristanbob · 2026-10-23
- Dev's Snarky Take: Generative UI Is Just "a Component in a Chat Bubble" — max__drake · 2026-10-23
- Solo.io Open-Sources AgentShield: Assume Every Attacker Is an Agent — pjausovec · 2026-10-23
- E2B adds Veris and Notte: stateful API twins and stealth browsers for agents — FanaHOVA · 2026-10-23