registry / @javascribe/pindoupic / 0.4.0

@javascribe/pindoupic@0.4.0

pindoupic 拼豆图纸生成器 — CLI + MCP Server 双模式；色板与预设内置，算法代码加密分发、密钥由 pindoupic.com 下发

AI Security Review

scanned 10d ago · by lpm-firewall-ai

Pattern generation activates opaque code that is decrypted using a remotely fetched key and evaluated at runtime. No confirmed malicious payload behavior is statically visible.

Static reason

No blocking static signals were detected.

Trigger

A user invokes the MCP pattern-generation tool.

Impact

The opaque plaintext runs with the privileges of the user running the MCP server, so its behavior cannot be verified from this package snapshot.

Mechanism

The MCP entry point reads the encrypted algorithm, fetches a key from the configured service, decrypts it, and executes the plaintext with the Function constructor.

AI rationale

The package uses remote-keyed encrypted code and dynamic evaluation for its core function, preventing meaningful static verification. There is no install-time execution or confirmed malicious action, so a warning is warranted rather than a block.

Evidence

dist/mcp.jsdist/core.enc.json

Network endpoints1

pindoupic.com/api/v1/crypto/algo-key

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The package exposes CLI and MCP entry points and has no install lifecycle hook.
The MCP code retrieves a key from the package service for an encrypted local code blob.
The decrypted blob is executed with the Function constructor when pattern generation is requested.
The bundled algorithm file is opaque encrypted data, preventing static verification of the executed code.

Evidence against

Behavioral surface

Source

EnvironmentVarsEvalNetwork

Supply chain

MinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 400 KB of source, external domains: pindoupic.com, www.w3.org

Source & flagged code

8 flagged

dist/mcp.jsView file

Lines 1-13javascript

1#!/usr/bin/env node

2import{Server as N2}from"@modelcontextprotocol/sdk/server/index.js";import{StdioServerTransport as j2}from"@modelcontextprotocol/sdk/server/stdio.js";import{CallToolRequestSchema as W2,ListToolsRequestSchema as O2}from"@modelcontextprotocol/sdk/types.js";import M2 from"sharp";import He from"sharp";var L=class{width;height;_pixels;constructor(a,e,_){this.width=a,this.height=e,this._pixels=_||null}getContext(a,e){return new xe(this)}},xe=class{_canvas;imageSmoothingEnabled=!0;imageSmoothingQuality="high";constructor(a){this._canvas=a}getImageData(a,e,_,d){let h=this._canvas._pixels;return{data:h ...

Medium

Ai Review Evidence

The MCP code retrieves a key from the package service for an encrypted local code blob.

dist/mcp.jsView on unpkg · L2

3return ${u2};`)();if(!f||typeof f.generatePattern!="function")throw new Error("\u7B97\u6CD5\u6A21\u5757\u521D\u59CB\u5316\u5931\u8D25\uFF08\u89E3\u5BC6\u540E\u672A\u5BFC\u51FA\u9884\u671F\u63A5\u53E3\uFF09");return f})(),z.catch(()=>{z=null}),z)}var z=null;var Re={brand:"mard",display_name:"MARD",sub_palette:"24",sub_palette_name:"24\u8272\u5957\u88C5",colors:[{id:"mard_24_A4",code:"A4",name:"\u660E\u4EAE\u67E0\u6AAC\u9EC4",hex_value:"#FBED56",hex:"#FBED56",rgb:[251,237,86],series:"A"},{id:"mard_24_A6",code:"A6",name:"\u871C\u6A59\u8272",hex_value:"#FEAC4C",hex:"#FEAC4C",rgb:[254,172,76],serie ...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/mcp.jsView on unpkg · L1

Medium

Ai Review Evidence

The decrypted blob is executed with the Function constructor when pattern generation is requested.

dist/mcp.jsView on unpkg · L3

Medium

Ai Review Evidence

The decrypted blob is executed with the Function constructor when pattern generation is requested.

dist/mcp.jsView on unpkg · L2

4`)}let Ce=Math.max(9,Math.floor(6*v)),be=Math.max(20,Math.floor(Ce*2.6)),_e=$+R+ue+r2+De+be,n=

5`),se=await M2(Buffer.from(s2)).png().toBuffer();if(G==="pdf"){let{execSync:s}=await import("node:child_process"),{mkdtempSync:x,writeFileSync:o,readFileSync:E,rmSync:D}=await import("node:fs"),{tmpdir:A}=await import("node:os"),{join:p}=await import("node:path"),K=x(p(A(),"pindoupic-pdf-")),Z=p(K,"temp.png"),w=p(K,"output.pdf");try{return o(Z,se),s(`sips -s format pdf "${Z}" --out "${w}"`,{timeout:1e4}),E(w)}catch(k){return console.error(`\u26A0 PDF conversion failed: ${k.message}. Falling back

7\u53C2\u6570\uFF1A

8- image_url / image_base64 / image_path: \u56FE\u7247\u6765\u6E90\uFF08\u4E09\u9009\u4E00\uFF0C\u672C\u673A\u6587\u4EF6\u63A8\u8350\u7528 image_path\uFF09

9- width: \u56FE\u7EB8\u5BBD\u5EA6 ${C.min}-${C.max}\uFF08\u9ED8\u8BA4 ${N.default_width}\uFF0C\u53EF\u7531\u540E\u53F0\u53C2\u6570\u8986\u76D6\uFF09

10- palette_brand: \u8272\u677F\u54C1\u724C\uFF08\u9ED8\u8BA4 MARD\uFF09

11- palette_sub: \u8272\u677F\u578B\u53F7\uFF08\u9ED8\u8BA4 291\uFF0C\u53EF\u9009\u503C\u89C1 list_palettes\uFF09

12- image_type: \u56FE\u7247\u7C7B\u578B\u9884\u8BBE\uFF08\u9ED8\u8BA4 miniapp_fast \u5C0F\u7A0B\u5E8F\u6781\u901F\u6A21\u5F0F\uFF09\uFF1A${Q.map(r=>r.id).join("|")}`,inputSchema:{type:"object",properties:{image_url:{type:"string",description:"\u56FE\u7247 URL\uFF08\u4E0E image_base64 / image_path \u4E09\u9009\u4E00\uFF09

Long lines were clipped for display.

package.jsonView file

Lines 1-38json

2 "name": "@javascribe/pindoupic",

3 "version": "0.4.0",

4 "description": "pindoupic 拼豆图纸生成器 — CLI + MCP Server 双模式；色板与预设内置，算法代码加密分发、密钥由 pindoupic.com 下发",

5 "type": "module",

dist/core.enc.jsonView file

Lines 1-1json

1{"iv":"cb8a851015e4a684f0bfcbbfea8aeae7","data":"78e553cdd44f6127e71f6c92ca7435cac42b224d42658d6f06061d0cd9b6c94b9a346f26e9173511184f7b1366e810c8391b0efa4711147f79119f265c202bacf7fb0ec5051a864c710d9e2ef0d6a167660ce53f8505bafa6740743b15ebb09449d1fd726f2b08acb99d712f57c6a140c30263a22d62495715c85dec2605277979ac96735678068e771827d23a5d4b426ffc0bdddca2efb7087beffc2345c216fe6af1698fd654000766a8fffa74d4a9aae82681649c1c878b6e472adcfc491760a1afc391c861e43188d94cf0fa4458d358451fdd3864e1c2b2b9623db5fb609f44cb1c717b2fca6816c11679b7efc06cf4c635beefc25618b2139d2bff6f80af5c9c9302d4f9459d68b5c201b9443803a84a8 ...

Medium

Ai Review Evidence

The bundled algorithm file is opaque encrypted data, preventing static verification of the executed code.

dist/core.enc.jsonView on unpkg · L1

Long lines were clipped for display.

Source & flagged code

8 flagged · loading source

dist/mcp.jsView file

1#!/usr/bin/env node L2: import{Server as N2}from"@[redacted].js";import{StdioServerTransport as j2}from"@[redacted].js";import{CallToolRequestSchema a... L3: return ${u2};`)();if(!f||typeof f.generatePattern!="function")throw new Error("\u7B97\u6CD5\u6A21\u5757\u521D\u59CB\u5316\u5931\u8D25\uFF08\u89E3\u5BC6\u540E\u672A\u5BFC\u51FA\u988...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/mcp.jsView on unpkg · L1

2ye(){return z||(z=(async()=>{let r=await t2(new URL("./core.enc.json",import.meta.url),"utf8"),a;try{a=await fetch(`${E2}/crypto/algo-key`,{signal:AbortSignal.timeout(8e3)})}catch(b){throw new Error(`\u65E0\u6CD5\u8FDE\u63A5 pindoupic.com \u83B7\u53D6\u7B97\u6CD5\u5BC6\u94A5\uFF08${b?.name||b?.message}\uFF09\u3002\u672C\u5DE5\u5177\u7684\u7B97\u6CD5\u4EE3\u7801\u662F\u52A0\u5BC6\u5206\u53D1\u7684\uFF0C\u5FC5\u987B\u5728\u7EBF\u53D6\u5BC6\u94A5\u624D\u80FD\u751F\u6210\u56FE\u7EB8\uFF1B\u7F51\u7AD9\u6062\u590D\u540E\

Medium

Ai Review Evidence

The MCP code retrieves a key from the package service for an encrypted local code blob.

dist/mcp.jsView on unpkg · L2

3await ye(),h=await Ge(r.input),i=await Me(h,a,r.resizeMode||"smooth"),{rgb:l,alpha:f}=Pe(i.pixels,i.width,i.height),b=new L(i.width,i.height,i.pixels),G=r.paletteColors.map(F=>{let M=F.hex_v

Medium

Ai Review Evidence

The decrypted blob is executed with the Function constructor when pattern generation is requested.

dist/mcp.jsView on unpkg · L3

2ffer.from(_,"hex"));i.setAuthTag(Buffer.from(h,"hex"));let l=Buffer.concat([i.update(Buffer.from(d,"hex")),i.final()]).toString("utf8"),f=new Function(`${l} return ${u2};`)();if(!f||typeof f.generatePattern!="function")throw new Error("\u7B97\u6CD5\u6A21\u5757\u521D\u59CB\u5316\u5931\u8D25\uFF08\u89E3\u5BC6\u540E\u672A\u5BFC\u51

Medium

Ai Review Evidence

The decrypted blob is executed with the Function constructor when pattern generation is requested.

dist/mcp.jsView on unpkg · L2

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/mcp.jsView on unpkg · L1

package.jsonView file

6"bin": { "pindoupic": "dist/cli.js", "pindoupic-mcp": "dist/mcp.js" }, "files": [ "dist/", "README.md", "skill/" ], "engines": { "node": "

Medium

Suspicious Lifecycle Evidence

The package exposes CLI and MCP entry points and has no install lifecycle hook.

package.jsonView on unpkg · L6

18"scripts": { "prepack": "rm -rf skill && cp -R ../skill skill", "build": "node esbuild.config.js", "start": "node dist/cli.js", "mcp": "node dis

Medium

Suspicious Lifecycle Evidence

The package exposes CLI and MCP entry points and has no install lifecycle hook.

package.jsonView on unpkg · L18

dist/core.enc.jsonView file

1{"iv":"[redacted]","data":"[redacted]

Medium

Ai Review Evidence

The bundled algorithm file is opaque encrypted data, preventing static verification of the executed code.

dist/core.enc.jsonView on unpkg · L1

Findings

1 High8 Medium3 Low

HighSame File Env Network Executiondist/mcp.js

MediumNetwork

MediumEnvironment Vars

MediumSuspicious Lifecycle Evidencepackage.json

MediumAi Review Evidencedist/mcp.js

MediumAi Review Evidencedist/core.enc.json

LowScripts Present

LowEvaldist/mcp.js

LowUrl Strings

Affected versions and remediation

This report applies to @javascribe/pindoupic@0.4.0.

See version security history for other recorded verdicts.

Review the evidence and your use of @javascribe/pindoupic@0.4.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-28 06:07:22.901Z (UTC).