registry / @hostinger/mcp / 3.17.2
@hostinger/mcp@3.17.2
MCP server for Hostinger API
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged shell and package-manager references are in an explicitly invoked build or bootstrap flow, and the inspected OAuth credential handling targets Hostinger's auth service. The added skills include a disclosed onboarding event, but the source directs the agent to explain it before sending; no malicious behavior was established.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Build-time compilation runs when the build script is invoked; OAuth and bootstrap behavior occurs during authentication or explicit setup.
Impact
No unrelated credential transfer, concealed execution, or unrequested install-time action was identified.
Mechanism
Compiles TypeScript, stores Hostinger OAuth credentials locally, and sends OAuth requests to Hostinger's auth service.
AI rationale
The flagged shell and package-manager references are in an explicitly invoked build or bootstrap flow, and the inspected OAuth credential handling targets Hostinger's auth service. The added skills include a disclosed onboarding event, but the source directs the agent to explain it before sending; no malicious behavior was established.
Evidence
dist/~/.config/hostinger-mcp/credentials.json%APPDATA%/hostinger-mcp/credentials.json
Network endpoints2
auth.hostinger.comraw.githubusercontent.com
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies a Hostinger API MCP server and points its entry points to server modules.
- The flagged build script runs `npx tsc` and copies package files into `dist`.
- OAuth requests use the Hostinger auth issuer and its OAuth endpoints.
- OAuth credentials are read from the package's named credentials file for token refresh.
- The headless bootstrap invokes this package through npx as part of an explicit connection flow.
- The headless skill describes an onboarding event and instructs the agent to tell the user before sending it.
Evidence against
- The build script executes a package-manager command, but only when the build script is run.
- OAuth reads and stores credentials, but the inspected token exchange targets Hostinger's own auth service.
- The bootstrap can fetch the latest package release, but it is a user-invoked setup step.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
7 flaggedbuild.jsView file
2L3: import { exec } from 'child_process';
L4: import fs from 'fs';
High
18console.log('Compiling TypeScript...');
L19: exec('npx tsc', (error, stdout, stderr) => {
L20: if (error) {
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
build.jsView on unpkg · L18•matchType = normalized_sha256
matchedPackage = hostinger-api-mcp@3.5.0
matchedPath = build.js
matchedIdentity = npm:aG9zdGluZ2VyLWFwaS1tY3A:3.5.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
build.jsView on unpkgskills/headless/connect/bootstrap.mjs
Findings
1 Critical7 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltasrc/core/skills.js
HighChild Processbuild.js
HighShell
HighRuntime Package Installbuild.js
HighKnown Malware Source Similarityskills/headless/connect/bootstrap.mjs
HighKnown Malware Source Similaritysrc/core/oauth.js
HighKnown Malware Source Similaritysrc/core/oauth.ts
HighKnown Malware Source Similaritybuild.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @hostinger/mcp@3.17.2.
See all versions of @hostinger/mcp for other recorded verdicts.
- Review the evidence and your use of @hostinger/mcp@3.17.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.