registry / Persistence / @groundtruth-mcp/gt-mcp

@groundtruth-mcp/gt-mcp

Enterprise-grade MCP server for live docs, best practices, code audit. Context7 alternative — 598+ libraries, evidence-verified answers (never generic), smart dispatch (use gt mcp), plain-text intent routing, telemetry, SSRF-hardened multi-source fetcher,

This report shows the evidence for @groundtruth-mcp/gt-mcp@7.5.0. 1 of 4 known versions is blocked or flagged. The newest version, 8.0.1, is allowed. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The package implements an unconsented install-time persistent marker specifically intended to invisibly alter its MCP output. Obfuscation of the distributed runtime further prevents normal review of that behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install, followed by running the MCP server

Impact

Unconsented persistent tracking marker and covert modification of MCP responses.

Mechanism

install-time persistent identifier for invisible output watermarking

Attack narrative

On installation, the postinstall hook creates or reuses ~/.gt-mcp-install.key using a random machine-specific value. Its own source states that this value is used for invisible response watermarking, and the runtime imports the watermark utility. This creates covert persistence and hidden response manipulation without an explicit user command.

AI rationale

Evidence

package.jsonpostinstall.mjsdist/utils/watermark.jsdist/index.js~/.gt-mcp-install.key

Decision evidence

public snapshot

AI called this Malicious at 93.0% confidence as Malware with low false-positive risk.

Evidence for block

package.json runs postinstall.mjs automatically.
postinstall.mjs writes a persistent per-machine key.
The hook states the key enables invisible response watermarking.
Published dist files are RC4 string-obfuscated.

Evidence against

The postinstall hook contains no network operation.
No agent-control configuration mutation was identified.
The hook only uses local fs, crypto, and console APIs.

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 131 file(s), 2.43 MB of source, external domains: github.com

Source & flagged code

4 flagged

package.jsonView file

Lines 1-37json

2 "name": "@groundtruth-mcp/gt-mcp",

3 "mcpName": "io.github.rm-rf-prod/groundtruth",

4 "version": "7.5.0",

5 "description": "Enterprise-grade MCP server for live docs, best practices, code audit. Context7 alternative — 598+ libraries, evidence-verified answers (never generic), smart dispatch (use gt mcp), plain-text intent routing, telemetry, SSRF-hardened multi-source fetcher, atomic disk cache, IPv6 + Unicode-homoglyph defenses.",

6 "type": "module",

7 "main": "dist/index.js",

8 "bin": {

9 "@groundtruth-mcp/gt-mcp": "dist/index.js",

10 "gt-mcp": "dist/index.js"

11 },

12 "files": [

13 "dist",

14 "postinstall.mjs"

15 ],

16 "scripts": {

17 "postinstall": "node postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L17

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L17

18 "build": "tsc && find dist -name '*.js.map' -delete && find dist -name '*.d.ts' -delete && javascript-obfuscator dist --output dist --compact true --string-array true --string-array-encoding rc4 --string-array-threshold 0.9 --split-strings true --split-strings-chunk-length 10",

19 "build:publish": "node scripts/swap-private.mjs && npm run build; EXIT=$?; node scripts/revert-private.mjs; exit $EXIT",

20 "dev": "tsx watch src/index.ts",

21 "start": "node dist/index.js",

22 "clean": "rm -rf dist",

23 "update-stats": "node scripts/update-stats.mjs",

24 "prepublishOnly": "npm run clean && npm run build:publish && npm run update-stats",

25 "test": "vitest run",

26 "test:coverage": "vitest run --coverage",

27 "typecheck": "tsc --noEmit",

28 "lint": "eslint src",

29 "version": "node scripts/update-version.mjs && node scripts/update-changelog.mjs && npm run update-stats && git add src/constants.ts CHANGELOG.md README.md server.json package.json llms.txt",

30 "postversion": "git push && git push origin \"v$(node -p 'require(\"./package.json\").version')\" && node scripts/create-release.mjs",

31 "release": "npm run typecheck && npm run test && npm version minor && npm publish --access public && mcp-publisher publish",

32 "release:patch": "npm run typecheck && npm run test && npm version patch && npm publish --access public && mcp-publisher publish",

33 "release:major": "npm run typecheck && npm run test && npm version major && npm publish --access public && mcp-publisher publish"

34 },

35 "engines": {

36 "node": ">=22"

37 },

dist/server/http.jsView file

Lines 1-1javascript

1const a4_0x29e989=a4_0x34dd;(function(_0x4eee60,_0x2fb2b5){const _0x2448ad=a4_0x34dd,_0x30ce33=_0x4eee60();while(!![]){try{const _0x4bfe7a

dist/constants.jsView file

Lines 1-1javascript

1const a1_0x498d06=a1_0x3f0e;(function(_0x55b24a,_0x139bfa){const _0x492f40=a1_0x3f0e,_0x56cdf7=_0x55b24a();while(!![]){try{const _0x5e249c

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/server/http.jsView file

1const a4_0x29e989=a4_0x34dd;(function(_0x4eee60,_0x2fb2b5){const _0x2448ad=a4_0x34dd,_0x30ce33=_0x4eee60();while(!![]){try{const _0x4bfe7a=parseInt(_0x2448ad(0x9b,'2leI'))/0x1*(-pa...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server/http.jsView on unpkg · L1

Findings

3 High6 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighObfuscated Payload Loaderdist/constants.js

HighObfuscated

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/server/http.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @groundtruth-mcp/gt-mcp@7.5.0.

The versions list below shows the verdict for each recorded version.

Avoid installing @groundtruth-mcp/gt-mcp@7.5.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-06 01:56:46.830Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

4 known versions

8.0.1latestClean—AllowPublishedOct 10, 2026, 10:43 PM 8.0.0Clean—AllowPublishedOct 10, 2026, 10:34 PM 7.5.0shownMaliciousPersistenceBlockPublishedAug 5, 2026, 2:08 PM 7.2.0SuspiciousPersistenceWarnPublishedJul 10, 2026, 12:06 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other persistence packages

Runtime surface

Behavioral surface

Related packages

Other persistence packages

Source & flagged code