registry  /  @mcpjam/inspector  /  2.22.1

@mcpjam/inspector@2.22.1

MCPJam Inspector

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsMinifiedTelemetryUrlStrings
Manifest
WildcardDependency
scanned 6 file(s), 558 KB of source, external domains: 127.0.0.1, api.workos.com, chatbox-chat.invalid, ollama.ai, react.dev
Oversized source lightweight scan
dist/client/assets/index-DQyJvUWO.js6.80 MB file, sampled 256 KB
NetworkHighEntropyStringsMinifiedUrlStringschatbox-chat.invalidreact.dev
dist/server/index.js3.18 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsCryptoShellHighEntropyStringsTelemetryUrlStrings127.0.0.1api.workos.com

Source & flagged code

3 flagged · loading source
.env.productionView file
3patternName = blocked_file severity = critical matchedText = .env.production redactedSecretContext = secretLikeLines = 2 L3: VITE_WORKOS_CLIENT_ID=<redacted:33 token-like> L4: VITE_WORKOS_REDIRECT_URI=<redacted:23 token-like>
Critical
Critical Secret

Package contains a critical-looking secret pattern.

.env.productionView on unpkg · L3
assets/icon.icnsView file
•path = assets/icon.icns kind = high_entropy_blob sizeBytes = 117358 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/icon.icnsView on unpkg
dist/server/index.jsView file
•path = dist/server/index.js kind = oversized_source_file sizeBytes = 3338952 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/server/index.jsView on unpkg

Findings

1 Critical2 High4 Medium5 Low
CriticalCritical Secret.env.production
HighShips High Entropy Blobassets/icon.icns
HighOversized Source Filedist/server/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings