@hostinger/mcp@1.60.2
MCP server for Hostinger API
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe active request path forwards credentials to an unrestricted environment-configured destination. The default destination is Hostinger and activation requires a tool call, so blocking is not supported.
Static reason
One or more suspicious static signals were detected.
Trigger
An MCP client invokes an API-backed tool while API_BASE_URL is set.
Impact
A pre-existing Hostinger credential could be exposed to an unrestricted operator-configured endpoint.
Mechanism
The runtime builds the request from API_BASE_URL, adds the resolved bearer token, and sends it with Axios.
AI rationale
The active request path forwards credentials to an unrestricted environment-configured destination. The default destination is Hostinger and activation requires a tool call, so blocking is not supported.
Evidence
src/core/runtime.js
Network endpoints1
developers.hostinger.com
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The API destination accepts an unrestricted API_BASE_URL environment override.
- The runtime derives request URLs from that configured base URL.
- It obtains a Hostinger API token and places it in an Authorization header.
- It sends the configured request with Axios after adding that header.
Evidence against
- The default API endpoint is the Hostinger developer service.
- Requests occur only after an MCP tool call.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedbuild.jsView file
2L3: import { exec } from 'child_process';
L4: import fs from 'fs';
High
18console.log('Compiling TypeScript...');
L19: exec('npx tsc', (error, stdout, stderr) => {
L20: if (error) {
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
build.jsView on unpkg · L18src/core/runtime.jsView file
42this.debug = process.env.DEBUG === "true";
this.baseUrl = process.env.API_BASE_URL || "https://developers.hostinger.com";
this.headers = this.parseHeaders(process.env.API_HEADERS
Medium
Ai Review Evidence
The API destination accepts an unrestricted API_BASE_URL environment override.
src/core/runtime.jsView on unpkg · L42Findings
3 High5 Medium4 Low
HighChild Processbuild.js
HighShell
HighRuntime Package Installbuild.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencesrc/core/runtime.js
MediumAi Review Evidencesrc/core/runtime.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @hostinger/mcp@1.60.2.
See all versions of @hostinger/mcp for other recorded verdicts.
- Review the evidence and your use of @hostinger/mcp@1.60.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.