Loading npm security reports…

@hailer/mcp@1.7.0: Unknown npm security report (Allow) | LPM Firewall

registry / @hailer/mcp / 1.7.0

@hailer/mcp@1.7.0

⚠ Under review

MCP server for Hailer - provides 52 tools to AI assistants (Claude Desktop, Claude Code).

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 21 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 129 file(s), 1.70 MB of source, external domains: 127.0.0.1, api.hailer.com, app.hailer.com, apps.hailer.com, d1.awsstatic.com, docs.hailer.com, example.com, form.hailer.com, logs.hailer.local.gd

Source & flagged code

13 flagged · loading source

scripts/build-public-chat-knowledge.pyView file

•path = scripts/build-public-chat-knowledge.py kind = build_helper sizeBytes = 3462 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/build-public-chat-knowledge.pyView on unpkg

dist/bot/services/operation-logger.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 28

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bot/services/operation-logger.js#virtual:normalized:round1View on unpkg

dist/mcp/publish-auth-injector.jsView file

Findings

12 High4 Medium5 Low

HighSemantic Analysis Limiteddist/bot/services/operation-logger.js#virtual:normalized:round1

HighKnown Malware Source Similaritydist/mcp/publish-auth-injector.js

HighKnown Malware Source Similaritydist/scaffold-cli/app-codegen.js

HighKnown Malware Source Similaritydist/scaffold-cli/bootstrap.js

HighKnown Malware Source Similaritydist/server/config.js

HighKnown Malware Source Similaritydist/mcp/tools/file.js

HighKnown Malware Source Similaritydist/mcp/utils/file-upload.js

HighKnown Malware Source Similaritydist/public-chat/graduate.js

HighKnown Malware Source Similaritydist/server/mcp-server.js

HighKnown Malware Source Similaritydist/mcp/tools/workflow-shared.js

Affected versions and remediation

This report applies to @hailer/mcp@1.7.0.

See all versions of @hailer/mcp for other recorded verdicts.

Review the evidence and your use of @hailer/mcp@1.7.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-18 08:35:46.017Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Source & flagged code

13 flagged

scripts/build-public-chat-knowledge.pyView file

•path = scripts/build-public-chat-knowledge.py kind = build_helper sizeBytes = 3462 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/build-public-chat-knowledge.pyView on unpkg

dist/bot/services/operation-logger.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 28

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bot/services/operation-logger.js#virtual:normalized:round1View on unpkg

dist/mcp/publish-auth-injector.jsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = dist/mcp/publish-auth-injector.js matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mcp/publish-auth-injector.jsView on unpkg

dist/scaffold-cli/app-codegen.jsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = dist/scaffold-cli/app-codegen.js matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scaffold-cli/app-codegen.jsView on unpkg

dist/scaffold-cli/bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = dist/scaffold-cli/bootstrap.js matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scaffold-cli/bootstrap.jsView on unpkg

dist/server/config.jsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = dist/server/config.js matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/config.jsView on unpkg

dist/mcp/tools/file.jsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = dist/mcp/tools/file.js matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mcp/tools/file.jsView on unpkg

dist/mcp/utils/file-upload.jsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = dist/mcp/utils/file-upload.js matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mcp/utils/file-upload.jsView on unpkg

dist/public-chat/graduate.jsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = dist/public-chat/graduate.js matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/public-chat/graduate.jsView on unpkg

dist/server/mcp-server.jsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = dist/server/mcp-server.js matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/mcp-server.jsView on unpkg

dist/mcp/tools/workflow-shared.jsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = dist/mcp/tools/workflow-shared.js matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mcp/tools/workflow-shared.jsView on unpkg

dist/mcp/workspace-admin-store.jsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = dist/mcp/workspace-admin-store.js matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mcp/workspace-admin-store.jsView on unpkg

scripts/smoke-public-chat-live.tsView file

•matchType = normalized_sha256 matchedPackage = @hailer/mcp@1.3.56 matchedPath = scripts/smoke-public-chat-live.ts matchedIdentity = npm:QGhhaWxlci9tY3A:1.3.56 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/smoke-public-chat-live.tsView on unpkg