registry / @echomem/mcp / 1.4.48
@echomem/mcp@1.4.48
EchoMem MCP bridge for cross-agent memory, local history import, and recall
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis completed at 93.0% confidence. No malicious behavior was detected; 17 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
10 flaggeddist/context-analysis/vendored-canonical.jsView file
1import { spawn } from "node:child_process";
L2: import fs from "node:fs";
High
Child Process
Package source references child process execution.
dist/context-analysis/vendored-canonical.jsView on unpkg · L1dist/setup.jsView file
641};
L642: const result = spawnSync(process.env.ComSpec || "cmd.exe", ["/d", "/s", "/c", `"${shellCommand}"`], spawnOptions);
L643: if (result.error)
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/setup.js:
import readline from "node:readline";
return configuredProfileDirectory("CODEX_HOME", ".codex");
return configuredProfileDirectory("CLAUDE_CONFIG_DIR", ".claude");
{ id: "codex", label: "Codex", kind: "command", detectDir: codexHome(), configPath: path.join(codexHome(), "config.toml"), note: "add to ~/.codex/config.toml under [mcp_servers.ech...
return fs.existsSync(home(".claude"));
/** The TOML block EchoMem adds to ~/.codex/config.toml. No secret — the bridge reads the keystore. */
fs.writeFileSync(configPath, next.join("\n").replace(/\n{3,}/g, "\n\n").replace(/^\n+/, ""));
* Write the EchoMem guidance block into the
Findings
8 High4 Medium5 Low
HighChild Processdist/context-analysis/vendored-canonical.js
HighShelldist/setup.js
HighSame File Env Network Executiondist/hud/server.js
HighCredential Redirect Persistencedist/setup.js
HighEntrypoint Foreign Package Code Overwritedist/setup.js
HighExternal Ai Agent Control Surface Mutationdist/hud/hooks.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/hud/hooks.js
HighPrevious Version Dangerous Deltadist/setup.js
MediumDynamic Requiredist/headless-runtime.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/hud/autostart.js
Affected versions and remediation
This report applies to @echomem/mcp@1.4.48.
See all versions of @echomem/mcp for other recorded verdicts.
- Review the evidence and your use of @echomem/mcp@1.4.48 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.