@mrrlin-dev/mcp@0.4.44: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@mrrlin-dev/mcp@0.4.44: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-restart.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/bin.cjsView file

20647var import_node_path35 = __toESM(require("node:path"), 1); L20648: var import_node_child_process18 = require("node:child_process"); L20649: var import_node_fs22 = require("node:fs");

High

Child Process

Package source references child process execution.

dist/bin.cjsView on unpkg · L20647

21386// src/agent-version.ts L21387: var import_node_child_process2 = require("node:child_process"); L21388: var import_semver = __toESM(require_semver2(), 1); L21389: var SEMVER_RE = /\b\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?\b/; L21390: var CODEX_PACKAGE = process.env.MRRLIN_CODEX_PACKAGE?.trim() || "@openai/codex"; L21391: var distTagsUrl = (pkg) => `https://registry.npmjs.org/-/package/${encodeURIComponent(pkg)}/dist-tags`; L21392: function parseCodexVersion(raw) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin.cjsView on unpkg · L21386

417try { L418: const utilInspect = eval("require('util').inspect"); L419: _custom = utilInspect.custom; ... L1620: if (global.Buffer && global.Buffer.isBuffer(str)) { L1621: str = str.toString("utf8"); L1622: } ... L2063: "use strict"; L2064: var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () ... L2065: }; ... L4016: kStatusCode: Symbol("status-code"), L4017: kWebSocket: Symbol("websocket"), L4018: NOOP: () => {

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bin.cjsView on unpkg · L417

8122if (!fs10[gracefulQueue]) { L8123: queue = global[gracefulQueue] || []; L8124: publishQueue(fs10, queue);

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/bin.cjsView on unpkg · L8122

417try { L418: const utilInspect = eval("require('util').inspect"); L419: _custom = utilInspect.custom;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/bin.cjsView on unpkg · L417

417try { L418: const utilInspect = eval("require('util').inspect"); L419: _custom = utilInspect.custom; ... L1620: if (global.Buffer && global.Buffer.isBuffer(str)) { L1621: str = str.toString("utf8"); L1622: } ... L2063: "use strict"; L2064: var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () ... L2065: }; ... L4016: kStatusCode: Symbol("status-code"), L4017: kWebSocket: Symbol("websocket"), L4018: NOOP: () => {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/bin.cjsView on unpkg · L417

scripts/postinstall-restart.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/postinstall-restart.cjs#virtual:normalized:round1View on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 25-53json

25 "@mrrlin/client": "0.0.0",

26 "@mrrlin/director-e2e": "0.0.0",

27 "@mrrlin/schemas": "0.0.0",

28 "@mrrlin/tsconfig": "0.0.0",

29 "@mrrlin/wiki": "0.0.0"

30 },

31 "dependencies": {

32 "@iarna/toml": "^2.2.5",

33 "@modelcontextprotocol/sdk": "^1.0.0",

34 "@mrrlin-dev/external-agents": "latest",

35 "@playwright/mcp": "0.0.76",

36 "playwright-core": "1.61.0-alpha-1781023400000",

37 "proper-lockfile": "^4.1.2",

38 "qrcode": "^1.5.4",

39 "semver": "^7.8.0",

40 "ws": "^8.18.0",

41 "zod": "^4.0.0"

42 },

43 "scripts": {

44 "build": "node scripts/write-version.mjs && tsc -p tsconfig.json && pnpm run bundle && chmod +x dist/bin.cjs",

45 "postinstall": "node scripts/postinstall-restart.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L45

46 "bundle": "node scripts/write-version.mjs && esbuild src/bin.ts --bundle --platform=node --format=cjs --target=node20 --outfile=dist/bin.cjs --banner:js='#!/usr/bin/env node' && mkdir -p dist/consensus/personas && cp src/consensus/personas/*.md dist/consensus/personas/",

47 "dev": "tsx watch src/bin.ts serve",

48 "lint": "eslint .",

49 "start": "node dist/bin.cjs serve",

50 "test": "pnpm --filter @mrrlin/agent-client build && node scripts/write-version.mjs && node --import tsx --test $(find src -name '*.test.ts' | sort | tr '\\n' ' ')",

51 "typecheck": "node scripts/write-version.mjs && pnpm --filter @mrrlin/schemas build && pnpm --filter @mrrlin/client build && pnpm --filter @mrrlin/wiki build && pnpm --filter @mrrlin/agent-client build && pnpm --filter @mrrlin/director-e2e build && tsc -p tsconfig.json --noEmit"

52 }

53}

dist/bin.cjsView file

20647var import_node_path35 = __toESM(require("node:path"), 1); L20648: var import_node_child_process18 = require("node:child_process"); L20649: var import_node_fs22 = require("node:fs");

High

Child Process

Package source references child process execution.

dist/bin.cjsView on unpkg · L20647

21386// src/agent-version.ts L21387: var import_node_child_process2 = require("node:child_process"); L21388: var import_semver = __toESM(require_semver2(), 1); L21389: var SEMVER_RE = /\b\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?\b/; L21390: var CODEX_PACKAGE = process.env.MRRLIN_CODEX_PACKAGE?.trim() || "@openai/codex"; L21391: var distTagsUrl = (pkg) => `https://registry.npmjs.org/-/package/${encodeURIComponent(pkg)}/dist-tags`; L21392: function parseCodexVersion(raw) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin.cjsView on unpkg · L21386

417try { L418: const utilInspect = eval("require('util').inspect"); L419: _custom = utilInspect.custom; ... L1620: if (global.Buffer && global.Buffer.isBuffer(str)) { L1621: str = str.toString("utf8"); L1622: } ... L2063: "use strict"; L2064: var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () ... L2065: }; ... L4016: kStatusCode: Symbol("status-code"), L4017: kWebSocket: Symbol("websocket"), L4018: NOOP: () => {

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

scripts/postinstall-restart.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/postinstall-restart.cjs#virtual:normalized:round1View on unpkg