NewsThe Hacker News
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
More on OpenCode
Other advisories
- Highosv:MAL-2026-18193Malicious code in opencode-skills-collection (npm)
- HighCVE-2026-119025npm open PowerShell injection (CVE-2026-119025): malicious MCP servers can run code on Windows/WSL via OpenCode and MCP Inspector sign-in
- Highosv:MAL-2026-17903Malicious code in @beloved-lenora/opencode-btw (npm)
- Highosv:MAL-2026-17905Malicious code in @beloved-lenora/opencode-orchestrator (npm)
- Highosv:MAL-2026-17908Malicious code in @beloved-lenora/opencode-stats (npm)
- Highosv:MAL-2026-17909Malicious code in @beloved-lenora/opencode-todo (npm)
- Highosv:MAL-2026-17906Malicious code in @beloved-lenora/opencode-shared-rpc (npm)
- Highosv:MAL-2026-17907Malicious code in @beloved-lenora/opencode-shell-guard (npm)
Source: https://thehackernews.com/2026/10/opencode-flaw-lets-malicious-mcp.html
ID