registry / @cachly-dev/mcp-server / 0.10.202

@cachly-dev/mcp-server@0.10.202

Solve it once. From then on, your AI knows. Experience for coding agents, EU-hosted: an MCP server for Claude Code, Cursor, Copilot & Windsurf. Learns from every bug fix, commit and CI run.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

The postinstall script only prints setup guidance. The reviewed runtime transfers and local hooks support the package’s Cachly service, and the inspected source did not establish a separate attack behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

The install hook prints setup guidance; separate setup commands and MCP sessions activate configuration and indexing behavior.

Impact

No confirmed harmful impact. Project and learning data are sent to the Cachly service as part of the package’s features.

Mechanism

The inspected code stores Cachly credentials for its own service and uses local editor hooks to support learning and recall.

AI rationale

Evidence

package.jsonscripts/postinstall.jsdist/src/index.jsdist/src/handlers/team.jsdist/src/ambient-hooks.jsdist/src/credentials.jsdist/src/neue-fassung.jsdist/src/einblendung.jshooks/cachly-ambient-einblendung.mjsdist/src/autor.jsdist/src/cls-hook.jsdist/src/doctor.jsdist/src/handlers/cache.jsdist/src/startwissen.js

Network endpoints2

api.cachly.devauth.cachly.dev

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json runs scripts/postinstall.js; that script prints setup guidance and a suggested command.
Runtime credentials come from Cachly environment variables, saved credentials, or Cachly editor configuration. Runtime service calls and project indexing support Cachly features.
The inspected integration files cover Cachly project instructions, local agent hooks, credential storage, version checks, diagnostics, cache tools, and git learning.

Evidence against

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 129 file(s), 1.03 MB of source, external domains: 127.0.0.1, aistudio.google.com, api.cachly.dev, api.cohere.com, api.mistral.ai, api.openai.com, api.telegram.org, auth.cachly.dev, cachly.dev, console.mistral.ai, dashboard.cohere.com, generativelanguage.googleapis.com, platform.openai.com, registry.npmjs.org, twitter.com

Source & flagged code

17 flagged

package.jsonView file

Lines 18-58json

18 },

19 "main": "./dist/src/index.js",

20 "scripts": {

21 "count-tools": "node scripts/count-tools.mjs",

22 "tool-catalog": "node scripts/tool-catalog.mjs summary",

23 "tool-catalog:json": "node scripts/tool-catalog.mjs json",

24 "tool-catalog:markdown": "node scripts/tool-catalog.mjs markdown",

25 "capability-docs": "node scripts/capability-docs.mjs markdown",

26 "capability-docs:write": "node scripts/capability-docs.mjs write",

27 "verify-capability-docs": "node scripts/capability-docs.mjs check",

28 "docs-atlas": "node scripts/docs-atlas.mjs summary",

29 "docs-atlas:write": "node scripts/docs-atlas.mjs write",

30 "verify-docs-atlas": "node scripts/docs-atlas.mjs check",

31 "tool-spec-snapshots:write": "node scripts/tool-spec-snapshots.mjs write",

32 "version": "node scripts/nummer-nachziehen.mjs && npm run tool-spec-snapshots:write",

33 "verify-tool-spec-snapshots": "node scripts/tool-spec-snapshots.mjs check",

34 "plugin-hooks:write": "tsx scripts/plugin-hooks-schreiben.mjs",

35 "verify-tool-counts": "node scripts/verify-tool-counts.mjs",

36 "verify-capabilities": "node scripts/verify-capabilities.mjs",

37 "build": "tsc && node scripts/paket-schliessen.mjs && node scripts/bauabdruck.mjs",

38 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L38

39 "dev": "tsx src/index.ts",

40 "start": "node dist/src/index.js",

41 "test": "vitest run",

42 "test:watch": "vitest",

43 "bench": "tsx src/bench/echter-korpus.ts",

44 "bench:spielzeug": "tsx src/bench/cachly-bench.ts",

45 "bench:external": "tsx src/bench/external-corpus.ts",

46 "bench:onboarding": "tsx src/bench/onboarding-bench.ts",

47 "bench:gate": "tsx src/bench/gate.ts",

48 "test:e2e": "bash scripts/e2e-run.sh",

49 "test:e2e:api": "bash scripts/e2e-run.sh api",

50 "test:e2e:cli": "bash scripts/e2e-run.sh cli",

51 "test:e2e:tools": "bash scripts/e2e-run.sh tools",

52 "test:e2e:funnel": "bash scripts/e2e-run.sh funnel",

53 "test:e2e:provisioning": "bash scripts/e2e-run.sh provisioning",

54 "lint": "eslint src",

55 "typecheck": "tsc --noEmit",

56 "bench:cost": "tsx src/bench/cost.ts",

57 "bench:zurueckhaltung": "tsx src/bench/zurueckhaltung-messen.ts",

58 "bench:ausgabe": "tsx src/bench/ausgabe-reihenfolge-messen.ts",

dist/src/autor.jsView file

Lines 1-2javascript

1import{execFileSync as c}from"node:child_process";const f=e=>n=>{try{return n.startsWith("-")?"":c(

dist/src/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import{setzeClientKennung as Pt}from"./herkunft.js";import{jwtExpiryMs as Ht,checkJwt as Mt,handleApiError as Dt,diagnoseAuth as Se,planAuthHeal as Ue,readClientCredentialsFromEnv as Ut,buildClientCredentialsBody as Jt,clientCredentialsTokenUrl as zt}

dist/src/lernen.jsView file

Lines 1-7javascript

1import{appendFileSync as B,mkdirSync as U,readFileSync as S,readdirSync as K,rmSync as E,statSync as D,writeFileSync as y}from"node:fs";import{join as h}from"node:path";import{tmpdir

dist/src/cls-hook.jsView file

6`+n+` L7: `,"utf-8"),await s(t,493).catch(()=>{}),"appended"}const _="try{var p={instance_id:process.env.CACHLY_BRAIN_INSTANCE_ID,source:'git_commit',payload:{message:process.env.CLS_MSG||''... L8: `)}export{p as CLS_HOOK_VERSION,L as buildClsPostCommitHook,A as installClsPostCommitHook};

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/src/cls-hook.jsView on unpkg · L6

dist/src/doctor.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/doctor.js#virtual:normalized:round1View on unpkg

hooks/cachly-ambient-einblendung.mjsView file

•matchType = normalized_sha256 matchedPackage = @cachly-dev/mcp-server@0.10.197 matchedPath = hooks/cachly-ambient-einblendung.mjs matchedIdentity = npm:QGNhY2hseS1kZXYvbWNwLXNlcnZlcg:0.10.197 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High