@hostinger/mcp@2.12.0
MCP server for Hostinger API
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe package’s active API path forwards environment or OAuth bearer credentials to a configurable destination without a destination restriction shown in that path. This warrants a warning for conditional credential exposure; the inspected build and manifest do not show a malicious install-time chain.
Static reason
One or more suspicious static signals were detected.
Trigger
The server starts and a client invokes an API operation while API_BASE_URL is configured.
Impact
A token could be disclosed to an operator-configured endpoint outside Hostinger if that endpoint is not trusted.
Mechanism
The runtime obtains an environment or OAuth bearer token, builds a request URL from API_BASE_URL, and places the token in the Authorization header.
AI rationale
The package’s active API path forwards environment or OAuth bearer credentials to a configurable destination without a destination restriction shown in that path. This warrants a warning for conditional credential exposure; the inspected build and manifest do not show a malicious install-time chain.
Evidence
src/core/runtime.jssrc/core/oauth.jssrc/servers/all.js
Network endpoints1
developers.hostinger.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The runtime accepts an operator-configured API base URL, defaulting to Hostinger’s developer API.
- An active API request obtains a bearer token and sends it to a URL built from that base; the code shown does not restrict the destination host.
- The active server entrypoint loads this runtime. Its token provider can return an environment token or a stored OAuth access token.
Evidence against
- The manifest points to ordinary MCP server entrypoints and declares no install lifecycle scripts.
- The flagged build script runs the TypeScript compiler and copies package files; it does not establish an install-time attack.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
4 flaggedbuild.jsView file
2L3: import { exec } from 'child_process';
L4: import fs from 'fs';
High
18console.log('Compiling TypeScript...');
L19: exec('npx tsc', (error, stdout, stderr) => {
L20: if (error) {
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
build.jsView on unpkg · L18src/core/runtime.jsView file
77this.server = null;
this.operations = new Map();
this.debug = process.env.DEBUG === "true";
this.baseUrl = process.env.API_BASE_URL || "https://developers.hostinger
Medium
Ai Review Evidence
The runtime accepts an operator-configured API base URL, defaulting to Hostinger’s developer API.
src/core/runtime.jsView on unpkg · L77Findings
3 High5 Medium4 Low
HighChild Processbuild.js
HighShell
HighRuntime Package Installbuild.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencesrc/core/runtime.js
MediumAi Review Evidencesrc/core/runtime.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @hostinger/mcp@2.12.0.
See all versions of @hostinger/mcp for other recorded verdicts.
- Review the evidence and your use of @hostinger/mcp@2.12.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.