Loading npm security reports…

@kryptosai/mcp-observatory@1.36.4: Malicious npm security report | LPM Firewall

registry / @kryptosai/mcp-observatory / 1.36.4

@kryptosai/mcp-observatory@1.36.4

MCP security scanner and CI gate. Test, secure, and monitor MCP servers with attack simulation, schema drift detection, health scoring, and SARIF before agents depend on them.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

Default-on telemetry transmits persistent device and repository identity plus command/scan metadata. Running scan also discovers foreign AI-agent configurations and sends their server commands or URLs.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Any explicit CLI invocation; scan additionally reads agent MCP configuration files.

Impact

Leaks identifying repository/device data and MCP deployment metadata to a vendor endpoint.

Mechanism

default telemetry and agent-config inventory exfiltration

Attack narrative

On every CLI run, the package loads telemetry state, gathers hostname and Git identity, then emits a default-enabled event. Scan reads MCP configurations from multiple unrelated agent products and reports discovered server commands or URLs in telemetry. The implementation includes a disclosure function, but the shipped CLI does not call it before collection or transmission.

Rationale

This is concrete default-on data exfiltration of user and repository identity, amplified by cross-agent configuration discovery. Explicit cloud features and guarded CI setup do not mitigate the unsolicited telemetry path.

Evidence

dist/src/cli.jsdist/src/telemetry.jsdist/src/discovery.jsdist/src/commands/scan.jsscripts/postinstall.mjs~/.mcp-observatory/config.json~/.claude.json~/.codex/config.json~/.cursor/mcp.json~/.vscode/mcp.json

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/src/ci-issue.jsView file

1import { execFile } from "node:child_process"; L2: import { mkdtemp, rm, writeFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/src/ci-issue.jsView on unpkg · L1

dist/src/commands/test.jsView file

242try { L243: execSync("command -v mcp-seatbelt 2>/dev/null || npx @kryptosai/mcp-seatbelt --version 2>/dev/null", { L244: stdio: "pipe",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/src/commands/test.jsView on unpkg · L242

dist/src/checks/skill-scan.jsView file

•matchType = normalized_sha256 matchedPackage = @kryptosai/mcp-observatory@1.32.1 matchedPath = dist/src/checks/skill-scan.js matchedIdentity = npm:[redacted]:1.32.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/checks/skill-scan.jsView on unpkg

dist/src/reporters/terminal.jsView file

•matchType = normalized_sha256 matchedPackage = @kryptosai/mcp-observatory@1.32.1 matchedPath = dist/src/reporters/terminal.js matchedIdentity = npm:[redacted]:1.32.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/reporters/terminal.jsView on unpkg

dist/src/risk-graph.jsView file

•matchType = normalized_sha256 matchedPackage = @kryptosai/mcp-observatory@1.32.1 matchedPath = dist/src/risk-graph.js matchedIdentity = npm:[redacted]:1.32.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/risk-graph.jsView on unpkg

dist/src/checks/attack-sim.jsView file

•matchType = normalized_sha256 matchedPackage = @kryptosai/mcp-observatory@1.32.1 matchedPath = dist/src/checks/attack-sim.js matchedIdentity = npm:[redacted]:1.32.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/checks/attack-sim.jsView on unpkg

dist/src/checks/runtime-profile.jsView file

•matchType = normalized_sha256 matchedPackage = @kryptosai/mcp-observatory@1.32.1 matchedPath = dist/src/checks/runtime-profile.js matchedIdentity = npm:[redacted]:1.32.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/checks/runtime-profile.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 91-131json

91 "examples/insecure-mcp-server",

92 "scripts/postinstall.mjs",

93 "schemas"

94 ],

95 "scripts": {

96 "build": "tsc -p tsconfig.json",

97 "cli": "tsx src/cli.ts",

98 "dashboard:build": "tsx scripts/build-dashboard.ts",

99 "metrics:collect": "tsx scripts/metrics-dashboard.ts collect",

100 "metrics:build": "tsx scripts/metrics-dashboard.ts build",

101 "metrics:refresh": "tsx scripts/metrics-dashboard.ts refresh",

102 "metrics:open": "tsx scripts/metrics-dashboard.ts open",

103 "metrics:serve": "tsx scripts/metrics-dashboard.ts serve",

104 "integration:real": "tsx scripts/run-real-server-matrix.ts",

105 "evaluate:permission-delta": "tsx scripts/evaluate-permission-delta-conformance.ts",

106 "evaluate:permission-delta:mcp-diff": "tsx scripts/run-mcp-diff-baseline.ts",

107 "intel:run": "tsx scripts/enterprise-intel.ts",

108 "safety-index": "tsx scripts/run-safety-index.ts",

109 "lint": "eslint .",

110 "prepack": "npm run build",

111 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L111

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L111

112 "proof:refresh": "tsx scripts/refresh-proof-artifacts.ts",

113 "release:prep": "node scripts/release.mjs",

114 "certification:pr-body": "tsx scripts/print-certification-pr-body.ts",

115 "typecheck": "tsc --noEmit -p tsconfig.json && npm --prefix api install && npm --prefix api run typecheck",

116 "test": "vitest run",

117 "test:permission-delta-model": "vitest run tests/permission-delta-model.test.ts",

118 "test:coverage": "vitest run --coverage",

119 "validate:artifacts": "tsx scripts/validate-artifacts.ts",

120 "verify:packed-install": "node scripts/verify-packed-install.mjs",

121 "smoke": "npm run cli -- run --target tests/fixtures/sample-target-config.json && npm run cli -- diff tests/fixtures/sample-run-a.json tests/fixtures/sample-run-b.json",

122 "telemetry:export": "tsx scripts/export-telemetry-d1.ts",

123 "telemetry:intelligence": "tsx scripts/telemetry-company-intelligence.ts --input telemetry-exports/events-flat-full.json --out-dir reports",

124 "telemetry:external": "tsx scripts/telemetry-company-intelligence.ts --input telemetry-exports/events-flat-full.json --out-dir reports"

125 },

126 "keywords": [

127 "mcp",

128 "mcp-server",

129 "model-context-protocol",

130 "ai-agent",

131 "agent-security",

dist/src/ci-issue.jsView file

Lines 1-21javascript

1import { execFile } from "node:child_process";

2import { mkdtemp, rm, writeFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/src/ci-issue.jsView on unpkg · L1

3import { tmpdir } from "node:os";

4

dist/src/commands/test.jsView file

Lines 222-262javascript

222 }

223 else {

224 await maybeConvertPassingCheckToCi({

225 artifact,

226 target,

227 targetPath: options.target,

228 setupCi: conversionFlags.setupCi,

229 yes: conversionFlags.yes,

230

dist/src/checks/skill-scan.jsView file

•matchType = normalized_sha256 matchedPackage = @kryptosai/mcp-observatory@1.32.1 matchedPath = dist/src/checks/skill-scan.js matchedIdentity = npm:[redacted]:1.32.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/checks/skill-scan.jsView on unpkg

dist/src/reporters/terminal.jsView file

•matchType = normalized_sha256 matchedPackage = @kryptosai/mcp-observatory@1.32.1 matchedPath = dist/src/reporters/terminal.js matchedIdentity = npm:[redacted]:1.32.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/reporters/terminal.jsView on unpkg

dist/src/risk-graph.jsView file

•matchType = normalized_sha256 matchedPackage = @kryptosai/mcp-observatory@1.32.1 matchedPath = dist/src/risk-graph.js matchedIdentity = npm:[redacted]:1.32.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/risk-graph.jsView on unpkg

dist/src/checks/attack-sim.jsView file

•matchType = normalized_sha256 matchedPackage = @kryptosai/mcp-observatory@1.32.1 matchedPath = dist/src/checks/attack-sim.js matchedIdentity = npm:[redacted]:1.32.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/checks/attack-sim.jsView on unpkg

dist/src/checks/runtime-profile.jsView file

•matchType = normalized_sha256 matchedPackage = @kryptosai/mcp-observatory@1.32.1 matchedPath = dist/src/checks/runtime-profile.js matchedIdentity = npm:[redacted]:1.32.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/checks/runtime-profile.jsView on unpkg