Loading npm security reports…

@kahinmcp/kahin@0.3.7: AI-agent control-surface risk | LPM Firewall

registry / @kahinmcp/kahin / 0.3.7

@kahinmcp/kahin@0.3.7

Kahin — CDP ansiklopedisi + anti-detect browser otomasyon MCP sunucusu. Kurulumda 22 AI CLI aracını otomatik tespit edip kendini kaydeder. Camoufox görsel varsayılandır; Obscura hızlı CDP işleri için opt-in'dir.

AI Security Review

scanned 9d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall silently registers the kahin executable as an MCP server across existing third-party AI-agent configurations. This creates a broad AI-agent control surface before an explicit setup command is run.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation executes postinstall

Impact

Affected AI clients may launch kahin and expose its browser-automation tools to their agents.

Mechanism

default-on cross-client MCP configuration mutation

Policy narrative

Installing the package runs setup.mjs without an explicit user command. It discovers existing configurations for 22 foreign AI clients and writes a kahin MCP server entry into each detected file. The added command launches the package’s Python MCP server, which provides browser automation and raw CDP capabilities. The opt-out environment variable does not establish consent for this broad postinstall mutation.

Rationale

Direct source inspection confirms unconsented postinstall writes to broad, foreign AI-agent control surfaces. This meets the blocking policy regardless of the package’s stated automation purpose.

Evidence

package.jsonbin/setup.mjsbin/kahin.mjslib/kahin-0.3.7-py3-none-any.whl~/.claude.json~/.codex/config.toml~/.cursor/mcp.json~/.config/Code/User/mcp.json~/.local/share/kahin/venv

Decision evidence

Source & flagged code

5 flagged

package.jsonView file

Lines 1-29json

1{

2 "name": "@kahinmcp/kahin",

3 "version": "0.3.7",

4 "description": "Kahin \u2014 CDP ansiklopedisi + anti-detect browser otomasyon MCP sunucusu. Kurulumda 22 AI CLI arac\u0131n\u0131 otomatik tespit edip kendini kaydeder. Camoufox g\u00f6rsel varsay\u0131land\u0131r; Obscura h\u0131zl\u0131 CDP i\u015fleri i\u00e7in opt-in'dir.",

5 "bin": {

6 "kahin": "bin/kahin.mjs"

7 },

8 "scripts": {

9 "postinstall": "node bin/setup.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

10 "setup": "node bin/setup.mjs"

11 },

12 "files": [

13 "bin",

14 "lib",

15 "LICENSE",

16 "CHANGELOG.md",

17 "README.md",

18 "docs/juggler-ai-native.md"

19 ],

20 "engines": {

21 "node": ">=18"

22 },

23 "license": "AGPL-3.0",

24 "repository": {

25 "type": "git",

26 "url": "git+https://gitlab.com/void0x14/kahin-mcp.git"

27 },

28 "homepage": "https://gitlab.com/void0x14/kahin-mcp",

29 "bugs": {

bin/setup.mjsView file

Lines 1-29javascript

1#!/usr/bin/env node

2// kahin auto-setup — kurulu AI CLI istemcilerini tespit eder ve kahin MCP'yi kaydeder.

3// Idempotent: zaten kayıtlıysa atlar, mevcut config'leri merge eder (ezmez).

4// Opt-out: KAHIN_SKIP_AUTO_SETUP=1

5// El ile: kahin setup

6//

7// Client listesi, otomatik tespit yapan sistemlerden derlendi (add-mcp 15 ajan,

8// everymcp 15, mcpm 20+, getmcp 19, mcp-get 9, mcpkit): 22 client.

9

10import { existsSync, readFileSync, writeFileSync, mkdirSync } from

lib/kahin-0.3.7-py3-none-any.whlView file

•path = lib/kahin-0.3.7-py3-none-any.whl kind = high_entropy_blob sizeBytes = 3601730 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/kahin-0.3.7-py3-none-any.whlView on unpkg

•path = lib/kahin-0.3.7-py3-none-any.whl kind = compressed_blob sizeBytes = 3601730 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

lib/kahin-0.3.7-py3-none-any.whlView on unpkg

•path = lib/kahin-0.3.7-py3-none-any.whl kind = nested_archive_needs_inspection sizeBytes = 3601730 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

lib/kahin-0.3.7-py3-none-any.whlView on unpkg