Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 7 finding(s) warrant review before installing.

View on npm All versions

registry / @morphllm/morphmcp / 0.8.209

@morphllm/morphmcp

@0.8.209

Fast & accurate MCP server with AI-powered file editing and intelligent code search. Prevents context pollution and saves time for a better user experience.

AI Security Review

scanned 9d ago · by lpm-firewall-ai

On failed MCP edit/search operations, the server transmits diagnostic data to a Morph endpoint. Edit-failure diagnostics can include the selected file's source content.

Static reason

One or more suspicious static signals were detected.

Trigger

User/client invokes edit_file or codebase_search and the operation fails.

Impact

Source code and query/model-message context may be disclosed to the vendor beyond normal tool processing.

Mechanism

Automatic authenticated error telemetry containing request/context data.

Rationale

No concrete install-time malware or foreign agent-control mutation was found, but obfuscated runtime code automatically exports sensitive project context on failure. This is a real data-exfiltration risk despite being vendor-aligned.

Evidence

package.jsondist/index.jsREADME.md

Network endpoints1

morphllm.com/api/error-report

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Benign with low false-positive risk.

Evidence for warning

All distributed JS is deliberately obfuscated.

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

dist/index.js POSTs error telemetry to Morph.

Edit failures include target source content in telemetry.

Search-error telemetry includes model messages/tool details.

Evidence against

package.json has only a prepare build/obfuscation hook.
No preinstall/install/postinstall hook or agent-config mutation found.
Runtime actions are MCP tools invoked by a configured client.
Dynamic require only reads the local package manifest.

Behavioral surface

Source

DynamicRequire

Supply chain

MinifiedObfuscatedTrivialUrlStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 104 KB of source, external domains: docs.morphllm.com, github.com, morphllm.com

Source & flagged code

2 flagged · loading source

dist/index.jsView file

1#!/usr/bin/env node L2: const a0_0x454090=a0_0x37fc;(function(_0xd003a6,_0x34388d){const _0x202f9f=a0_0x37fc,_0x34eb70=_0xd003a6();while(!![]){try{const _0x3433c8=parseInt(_0x202f9f(0x180))/0x1*(parseInt(...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

dist/tool-definitions.jsView file

1const a7_0x3baecd=a7_0x3604;(function(_0x518807,_0x500fd7){const _0x534c1c=a7_0x3604,_0x3de4ee=_0x518807();while(!![]){try{const _0x4f8d4d=-parseInt(_0x534c1c(0x178))/0x1+parseInt(...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/tool-definitions.jsView on unpkg · L1

Findings

2 High2 Medium3 Low

HighObfuscated Payload Loaderdist/tool-definitions.js

HighObfuscated

MediumDynamic Requiredist/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowUrl Strings

91%Warn

Verdict confidence

IntentBenign

TypeData Exfiltration

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

AuthorMorph

Maintainersmorphllmman

Version0.8.211

PublishedAug 10, 2026

LicenseMIT

Dependencies15

Integrityverified

Package size35.5 KB

Files19

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsbin → morph-mcp

RuntimeNo engine / OS / CPU constraints

Artifact

LPM CLI

118 KB · 19 files

1 signature(s)

Install lifecycleprepare

Behavioral surface

DynamicRequireMinifiedObfuscatedTrivialUrlStringsManifest: clean

@morphllm/morphmcp@0.8.209: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-2javascript

1#!/usr/bin/env node

2const a0_0x454090=a0_0x37fc;(function(_0xd003a6,_0x34388d){const _0x202f9f=a0_0x37fc,_0x34eb70=_0xd003a6();while(

!!

[]){

try

{

const

_0x3433c8

=

parseInt

(

_0x202f9f

(

0x180

))

/

0x1

*

(

parseInt

(

_0x202f9f

(

0x1e3

))

/

0x2

)

+

parseInt

(

_0x202f9f

(

0x1f3

))

/

0x3

*

(

parseInt

(

_0x202f9f

(

0x133

))

/

0x4

)

+-

parseInt

(

_0x202f9f

(

0x1ca

))

/

0x5

*

(

-

parseInt

(

_0x202f9f

(

0x1fc

))

/

0x6

)

+

parseInt

(

_0x202f9f

(

0x15d

))

/

0x7

+-

parseInt

(

_0x202f9f

(

0x1cc

))

/

0x8

+

parseInt

(

_0x202f9f

(

0xf9

))

/

0x9

+-

parseInt

(

_0x202f9f

(

0x10c

))

/

0xa

;

if

(_0x3433c8

===

_0x34388d)

break

;

else

_0x34eb70[

'push'

](_0x34eb70[

'shift'

]());}

catch

(_0x44af89){_0x34eb70[

'push'

](_0x34eb70[

'shift'

]());}}}(a0_0

...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

Long lines were clipped for display.

dist/tool-definitions.jsView file

Lines 1-1javascript

1const a7_0x3baecd=a7_0x3604;(function(_0x518807,_0x500fd7){const _0x534c1c=a7_0x3604,_0x3de4ee=_0x518807();while(!![]){try{const _0x4f8d4d

=-

parseInt

(

_0x534c1c

(

0x178

))

/

0x1

+

parseInt

(

_0x534c1c

(

0x17c

))

/

0x2

+

parseInt

(

_0x534c1c

(

0x173

))

/

0x3

+

parseInt

(

_0x534c1c

(

0x177

))

/

0x4

+-

parseInt

(

_0x534c1c

(

0x17b

))

/

0x5

*

(

-

parseInt

(

_0x534c1c

(

0x17d

))

/

0x6

)

+

parseInt

(

_0x534c1c

(

0x175

))

/

0x7

*

(

parseInt

(

_0x534c1c

(

0x179

))

/

0x8

)

+-

parseInt

(

_0x534c1c

(

0x174

))

/

0x9

;

if

(_0x4f8d4d

===

_0x500fd7)

break

;

else

_0x3de4ee[

'push'

](_0x3de4ee[

'shift'

]());}

catch

(_0x128660){_0x3de4ee[

'push'

](_0x3de4ee[

'shift'

]());}}}(a7_0x2137,

0xe34c9

));

export

const

TOO

...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/tool-definitions.jsView on unpkg · L1

Long lines were clipped for display.