registry / @cachly-dev/mcp-server / 0.10.204
@cachly-dev/mcp-server@0.10.204
Solve it once. From then on, your AI knows. Experience for coding agents, EU-hosted: an MCP server for Claude Code, Cursor, Copilot & Windsurf. Learns from every bug fix, commit and CI run.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe runtime poll can make an editor configuration change without a separate setup command, so a warning is warranted. The inspected source supports a first-party setup capability, not a malicious install beacon or unrelated credential disclosure.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Starting the stdio server without a key available, with the start-wissen setting enabled, followed by a Cachly key becoming available during its background poll.
Impact
The global entry can make Cachly available to later Claude sessions. No unrelated recipient or broader agent control change is established.
Mechanism
The poll reads the saved key and writes the Cachly MCP entry to global Claude configuration, then updates existing Cachly entries in Cursor and Windsurf configuration.
AI rationale
The runtime poll can make an editor configuration change without a separate setup command, so a warning is warranted. The inspected source supports a first-party setup capability, not a malicious install beacon or unrelated credential disclosure.
Evidence
dist/src/index.jsdist/src/credentials.jsdist/src/konto-anlegen.js~/.claude/mcp.json~/.cursor/mcp.json~/.codeium/windsurf/mcp_config.json
Network endpoints1
api.cachly.dev
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- When the stdio server starts without an available key, its default-enabled background poll can find a saved Cachly key and write it into global Claude configuration and existing Cachly entries in Cursor or Windsurf.
- The package postinstall runs a message script that points users to a separate autopilot command; the inspected postinstall does not make a network request.
- The hook’s trial request sends an empty body to the configured Cachly API. The default API host is api.cachly.dev, and inspected telemetry reports instance or connection diagnostics to that API.
- The agent integration locations reference Cachly MCP entries, editor hooks, and local credentials; they do not establish a foreign recipient or broad agent configuration change.
Evidence against
- The key is copied into Cachly’s own editor configuration, and the inspected source does not show it being sent to an unrelated recipient.
- The postinstall’s separate setup instruction does not itself perform the runtime configuration write.
Behavioral surface
ChildProcess
Source & flagged code
16 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/src/autor.jsView file
1import{execFileSync as c}from"node:child_process";const f=e=>n=>{try{return n.startsWith("-")?"":c("git",["config",n],{cwd:e,encoding:"utf-8",stdio:"pipe",timeout:1500,windowsHide:...
High
Findings
1 Critical12 High5 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/src/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/src/autor.js
HighSame File Env Network Executiondist/src/index.js
HighCredential Exfiltrationdist/src/index.js
HighTrigger Reachable Credential Exfiltrationdist/src/index.js
HighRuntime Package Installdist/src/cls-hook.js
HighSemantic Analysis Limiteddist/src/doctor.js#virtual:normalized:round1
HighKnown Malware Source Similarityhooks/cachly-ambient-einblendung.mjs
HighKnown Malware Source Similaritydist/src/handlers/cache.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @cachly-dev/mcp-server@0.10.204.
See all versions of @cachly-dev/mcp-server for other recorded verdicts.
- Review the evidence and your use of @cachly-dev/mcp-server@0.10.204 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.