registry / @morphllm/morphmcp / 0.8.213
@morphllm/morphmcp@0.8.213
Fast & accurate MCP server with AI-powered file editing and intelligent code search. Prevents context pollution and saves time for a better user experience.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiNo concrete install-time compromise, shell execution, or payload loader was verified. Deliberate obfuscation combined with automatic network error reporting leaves a real unresolved risk.
Static reason
One or more suspicious static signals were detected.
Trigger
Run the morph-mcp command and cause a tool error.
Impact
Error details and supplied context may be transmitted to Morph; the obscured implementation prevents a clean verdict.
Mechanism
Obfuscated MCP runtime with automatic error telemetry.
AI rationale
No concrete install-time compromise, shell execution, or payload loader was verified. Deliberate obfuscation combined with automatic network error reporting leaves a real unresolved risk.
Evidence
dist/index.js
Network endpoints1
morphllm.com/api/error-report
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package deliberately builds obfuscated distribution files during its prepare script.
- The published tool-definition module is obfuscated with a string table and decoder.
- When the MCP server runs, its error-reporting function posts a caller-supplied error payload to Morph's error-report endpoint.
Evidence against
- There is no preinstall, install, or postinstall lifecycle hook.
- The inspected code imports MCP server and filesystem utilities and exposes named editing and code-search tools; no shell execution or dynamic code evaluation was found.
- The prepare script is a build-time hook, not a registry install hook, and there is no self-dependency.
Behavioral surface
HighEntropyStringsMinifiedObfuscatedTrivialUrlStrings
Source & flagged code
5 flagged · loading sourcedist/tool-definitions.jsView file
1const a7_0x4402a7=a7_0x2d05;function a7_0xd7f0(){const _0x36f799=['reflex_predict','reflex_traces','785EFbwbO','reflex_list','614406ahWzFE','4392388mXRtfP','1293676cwmEzf','2520649...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/tool-definitions.jsView on unpkg · L11function a7_0xd7f0(){const _0x36f799=['reflex_predict','reflex_traces','785EFbwbO','reflex_list','614406ahWzFE','4392388mXRtfP','1293676cwmEzf','25206498LrpSCj','2797032yxUESJ','7732drDxrY','1776QGJicF','edit_file','codebase_search','39180lZPRQk','values','github_codebase_search'];a7_0xd7f0=function(){return _0x36f799;};return a7_0xd7f0();}
Medium
Ai Review Evidence
The published tool-definition module is obfuscated with a string table and decoder.
dist/tool-definitions.jsView on unpkg · L1package.jsonView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
Findings
3 High4 Medium4 Low
HighObfuscated Payload Loaderdist/tool-definitions.js
HighObfuscated
HighSemantic Analysis Limitedpackage.json
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
MediumAi Review Evidencedist/tool-definitions.js
MediumAi Review Evidencedist/index.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @morphllm/morphmcp@0.8.213.
See all versions of @morphllm/morphmcp for other recorded verdicts.
- Review the evidence and your use of @morphllm/morphmcp@0.8.213 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.