@hostinger/mcp@3.7.1
MCP server for Hostinger API
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe source permits environment-configured destinations to receive saved Hostinger credentials without an allowlist. Since the defaults are Hostinger endpoints and an alternate destination requires operator configuration, this is a conditional credential exposure warning, not proof of malicious behavior.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A caller uses the server with saved credentials while OAUTH_ISSUER or API_BASE_URL points to another host.
Impact
If an operator configures an untrusted destination, that host can receive the corresponding token.
Mechanism
OAuth refresh requests include the saved refresh token at the configured issuer; runtime API requests attach the bearer token to URLs built from API_BASE_URL.
AI rationale
The source permits environment-configured destinations to receive saved Hostinger credentials without an allowlist. Since the defaults are Hostinger endpoints and an alternate destination requires operator configuration, this is a conditional credential exposure warning, not proof of malicious behavior.
Evidence
src/core/oauth.jssrc/core/runtime.js~/.config/hostinger-mcp/credentials.json
Network endpoints2
auth.hostinger.com/api/external/v1/oauth-server/tokendevelopers.hostinger.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package manifest has no install lifecycle hook; its scripts are start, build, and start:ts.
- The OAuth provider loads saved credentials and accepts OAUTH_ISSUER as an override to its Hostinger default.
- When refreshing a saved session, the provider sends its refresh token to the configured issuer without a destination allowlist.
- Runtime API calls use API_BASE_URL to build the request URL and attach the bearer token to the request.
- The main server entrypoint starts the runtime with the package’s tools and skills.
Evidence against
- The default OAuth issuer and API host are Hostinger endpoints.
- The alternate destinations require operator-supplied environment configuration; the inspected source does not show an automatic third-party destination.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
9 flaggedbuild.jsView file
2L3: import { exec } from 'child_process';
L4: import fs from 'fs';
High
18console.log('Compiling TypeScript...');
L19: exec('npx tsc', (error, stdout, stderr) => {
L20: if (error) {
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
build.jsView on unpkg · L18•matchType = normalized_sha256
matchedPackage = hostinger-api-mcp@3.5.0
matchedPath = build.js
matchedIdentity = npm:aG9zdGluZ2VyLWFwaS1tY3A:3.5.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
build.jsView on unpkgskills/headless/connect/bootstrap.mjs
Findings
10 High3 Medium4 Low
HighChild Processbuild.js
HighShell
HighRuntime Package Installbuild.js
HighKnown Malware Source Similarityskills/headless/connect/bootstrap.mjs
HighKnown Malware Source Similaritysrc/core/oauth.js
HighKnown Malware Source Similaritysrc/core/oauth.ts
HighKnown Malware Source Similaritybuild.js
HighKnown Malware Source Similaritysrc/core/skills.js
HighKnown Malware Source Similaritysrc/core/skills.ts
HighKnown Malware Source Similarityskills/headless/steps/05-design/logo-kit.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @hostinger/mcp@3.7.1.
See all versions of @hostinger/mcp for other recorded verdicts.
- Review the evidence and your use of @hostinger/mcp@3.7.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.