registry / @hostinger/mcp / 3.15.1
@hostinger/mcp@3.15.1
MCP server for Hostinger API
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged process execution is limited to compiling TypeScript and opening the OAuth sign-in page. Credentials and API requests are directed to Hostinger, while account operations are dispatched in response to MCP tool calls.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
MCP startup exposes tools; OAuth login occurs on an explicit login command or when an API operation needs authentication and no usable token is available.
Impact
No automatic credential theft, unrelated network contact, or unrequested account action was identified.
Mechanism
OAuth grants and API requests go to Hostinger services. The build script compiles TypeScript; bundled skills are served as MCP resources.
AI rationale
The flagged process execution is limited to compiling TypeScript and opening the OAuth sign-in page. Credentials and API requests are directed to Hostinger, while account operations are dispatched in response to MCP tool calls.
Evidence
~/.config/hostinger-mcp/credentials.json%APPDATA%/hostinger-mcp/credentials.json
Network endpoints5
auth.hostinger.com/api/external/v1/oauth-server/registerauth.hostinger.com/api/external/v1/oauth-server/authorizeauth.hostinger.com/api/external/v1/oauth-server/tokenauth.hostinger.com/api/external/v1/oauth-server/token/revokedevelopers.hostinger.com
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies this as a Hostinger API MCP server.
- The build script runs `npx tsc` as its compilation step.
- OAuth is configured for Hostinger’s auth service, and the token exchange sends OAuth grant parameters there.
- API operations run through the MCP tool-call handler, which dispatches requested operations.
Evidence against
- The package uses child-process execution to open a browser during OAuth login and runs a compiler in the build script.
- It stores Hostinger OAuth tokens locally and sends authenticated API requests to Hostinger.
- The bundled skills contain operational guidance for managing hosting accounts, but the package serves them as resources rather than executing them automatically.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggedbuild.jsView file
2L3: import { exec } from 'child_process';
L4: import fs from 'fs';
High
18console.log('Compiling TypeScript...');
L19: exec('npx tsc', (error, stdout, stderr) => {
L20: if (error) {
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
build.jsView on unpkg · L18•matchType = normalized_sha256
matchedPackage = hostinger-api-mcp@3.5.0
matchedPath = build.js
matchedIdentity = npm:aG9zdGluZ2VyLWFwaS1tY3A:3.5.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
build.jsView on unpkgskills/headless/connect/bootstrap.mjs
Findings
1 Critical7 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltasrc/core/skills.js
HighChild Processbuild.js
HighShell
HighRuntime Package Installbuild.js
HighKnown Malware Source Similarityskills/headless/connect/bootstrap.mjs
HighKnown Malware Source Similaritysrc/core/oauth.js
HighKnown Malware Source Similaritysrc/core/oauth.ts
HighKnown Malware Source Similaritybuild.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @hostinger/mcp@3.15.1.
See all versions of @hostinger/mcp for other recorded verdicts.
- Review the evidence and your use of @hostinger/mcp@3.15.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.