registry / @hostinger/mcp / 3.20.4
@hostinger/mcp@3.20.4
MCP server for Hostinger API
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged build script performs compilation only when manually run, and the changed OAuth code implements Hostinger's browser-based login and token flow with issuer validation. No install-time activity or unrelated credential transmission was found.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The server runs when invoked as an MCP entry point; OAuth sign-in occurs when requested or when an API call needs authentication and no usable credentials exist.
Impact
Expected service authentication and API access; no unrelated collection or harmful action was found.
Mechanism
It sends OAuth registration, authorization-code, refresh, and revocation requests to the configured issuer, and attaches bearer tokens to Hostinger API requests.
AI rationale
The flagged build script performs compilation only when manually run, and the changed OAuth code implements Hostinger's browser-based login and token flow with issuer validation. No install-time activity or unrelated credential transmission was found.
Evidence
~/.config/hostinger-mcp/credentials.json%APPDATA%/hostinger-mcp/credentials.jsondist/
Network endpoints1
auth.hostinger.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package starts a Hostinger API MCP server through its declared entry points.
- OAuth uses Hostinger's auth issuer by default and restricts overrides to HTTPS origins or loopback HTTP.
- OAuth exchanges authorization codes and refresh tokens with the configured issuer; the login path uses a browser callback and PKCE.
- API bearer tokens are attached to requests made by the MCP runtime.
- The flagged build script runs TypeScript compilation when explicitly invoked as the build script.
Evidence against
- No install lifecycle script is declared in package.json.
- OAuth credentials are stored for this package under the user's hostinger-mcp configuration directory.
- The headless bootstrap is an explicit connect helper and launches the package's own MCP binary for login.
- No unrelated credential collection, external collector, or concealed execution behavior was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggedbuild.jsView file
2L3: import { exec } from 'child_process';
L4: import fs from 'fs';
High
18console.log('Compiling TypeScript...');
L19: exec('npx tsc', (error, stdout, stderr) => {
L20: if (error) {
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
build.jsView on unpkg · L18•matchType = normalized_sha256
matchedPackage = hostinger-api-mcp@3.5.0
matchedPath = build.js
matchedIdentity = npm:aG9zdGluZ2VyLWFwaS1tY3A:3.5.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
build.jsView on unpkgskills/headless/connect/bootstrap.mjs
Findings
1 Critical5 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltasrc/core/oauth.ts
HighChild Processbuild.js
HighShell
HighRuntime Package Installbuild.js
HighKnown Malware Source Similarityskills/headless/connect/bootstrap.mjs
HighKnown Malware Source Similaritybuild.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @hostinger/mcp@3.20.4.
See all versions of @hostinger/mcp for other recorded verdicts.
- Review the evidence and your use of @hostinger/mcp@3.20.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.