@myelixlabs/synapse-mcp@3.6.2: AI-agent control-surface risk

Loading npm security reports…

Source & flagged code

14 flagged

package.jsonView file

•scripts.postinstall = node bin/synapse-mcp.js install --quiet || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

8scripts.postinstall = node bin/synapse-mcp.js install --quiet || true Install-time code downloads an unverified remote native executable, stages it locally, activates an executable path, and exposes it to process execution. L8: * → launcher installed + service running → show status L9: * → launcher installed + service stopped → offer to start L10: * → not installed → run full wizard ... L14: * install --quiet → silent install (CI / postinstall) L15: * start → service.start() L16: * stop → service.stop() L17: * restart → service.restart() L18: * status → service.status() ... L29: * repos reindex → repos.reindex() L30: * ui → startDashboard() + open browser L31: * ... L37: * The

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L8

•scripts.postinstall = node bin/synapse-mcp.js install --quiet || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/synapse-mcp.jsView file

Lines 25-65javascript

25 * repos add → repos.add()

26 * repos archive → repos.archive()

27 * repos restore → repos.restore()

28 * repos remove → repos.remove()

29 *

bin/synapse-mcp.js#virtual:normalized:round1View file

614probePort: async (port) => { L615: const http = require("node:http"); L616: return new Promise((resolve) => { ... L622: req.setTimeout(2000, () => { req.destroy(); resolve(false); }); L623: req.end(); L624: }); L625: }, L626: // Why callMcp injectable: tests inject a fast no-op so richStatus() doesn"t\n // hit the real MCP server (which can take 6-13s for the full status scan).\n callMcp: asy... L627: setImmediate(async () => {

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/synapse-mcp.js#virtual:normalized:round1View on unpkg · L614

614Trigger-reachable command-output exfiltration chain: scripts.postinstall -> bin/synapse-mcp.js L614: probePort: async (port) => { L615: const http = require("node:http"); L616: return new Promise((resolve) => { ... L622: req.setTimeout(2000, () => { req.destroy(); resolve(false); }); L623: req.end(); L624: }); L625: }, L626: // Why callMcp injectable: tests inject a fast no-op so richStatus() doesn"t\n // hit the real MCP server (which can take 6-13s for the full status scan).\n callMcp: asy... L627: setImmediate(async () => {

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

bin/synapse-mcp.js#virtual:normalized:round1View on unpkg · L614

lib/service.jsView file

Lines 5-45javascript

5 *

6 * Responsibilities:

7 * start() — spawn launcher with --http --port <port>, detach, write PID file,

lib/install.jsView file

Lines 231-271javascript

231

232/**

233 * Download a launcher binary via Node's built-in fetch.

234 *

235 * Why fetch (not curl): CI images like node:20-slim and many minimal

236 * environments do not ship curl. Node >=18 (our engines floor) provides

237 * fetch, so we avoid an external binary dependency for postinstall.

238 */

239async function downloadArtifact(url

lib/service-os.jsView file

•matchType = normalized_sha256 matchedPackage = @myelixlabs/synapse-mcp@3.4.0 matchedPath = lib/service-os.js matchedIdentity = npm:QG15ZWxpeGxhYnMvc3luYXBzZS1tY3A:3.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/service-os.jsView on unpkg

lib/auto-update.jsView file

•matchType = normalized_sha256 matchedPackage = @myelixlabs/synapse-mcp@3.4.0 matchedPath = lib/auto-update.js matchedIdentity = npm:QG15ZWxpeGxhYnMvc3luYXBzZS1tY3A:3.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/auto-update.jsView on unpkg

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/synapse-mcp.js install --quiet || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L8

•scripts.postinstall = node bin/synapse-mcp.js install --quiet || true

@myelixlabs/synapse-mcp@3.6.2: AI-agent control-surface risk | LPM Firewall

Source & flagged code

14 flagged

package.jsonView file

•scripts.postinstall = node bin/synapse-mcp.js install --quiet || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L8

•scripts.postinstall = node bin/synapse-mcp.js install --quiet || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/synapse-mcp.jsView file

Lines 25-65javascript

25 * repos add → repos.add()

26 * repos archive → repos.archive()

27 * repos restore → repos.restore()

28 * repos remove → repos.remove()

29 *

bin/synapse-mcp.js#virtual:normalized:round1View file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/synapse-mcp.js#virtual:normalized:round1View on unpkg · L614

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

bin/synapse-mcp.js#virtual:normalized:round1View on unpkg · L614

lib/service.jsView file

Lines 5-45javascript

5 *

6 * Responsibilities:

7 * start() — spawn launcher with --http --port <port>, detach, write PID file,

lib/install.jsView file

Lines 231-271javascript

231

232/**

233 * Download a launcher binary via Node's built-in fetch.

234 *

235 * Why fetch (not curl): CI images like node:20-slim and many minimal

236 * environments do not ship curl. Node >=18 (our engines floor) provides

237 * fetch, so we avoid an external binary dependency for postinstall.

238 */

239async function downloadArtifact(url

lib/service-os.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/service-os.jsView on unpkg

lib/auto-update.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/auto-update.jsView on unpkg

@myelixlabs/synapse-mcp@3.6.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code