Loading npm security reports…

@noclaf/mcp@0.3.7: Suspicious npm security report (Warn) | LPM Firewall

registry / @noclaf/mcp / 0.3.7

@noclaf/mcp@0.3.7

Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

MCP server e CLI pra controlar o NOS (Noclaf Operation System) a partir de assistentes de IA como Claude Code, Codex CLI e GitHub Copilot.

AI Security Review

scanned 14d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No confirmed malicious payload or install-time attack was found. The main risk is package-aligned AI-agent extension lifecycle behavior: explicit CLI setup and MCP runtime auto-pull can write Noclaf commands/skills/prompts into Claude/Codex surfaces from local bundle or approved Supabase vault docs.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

User runs noclaf init/install-client/sync/pull, or starts configured noclaf-mcp server.

Impact

Could change agent instructions available to Claude/Codex for the user; dependency install helpers can run allowlisted npm/npx/git commands only with prompt or --yes.

Mechanism

AI-agent config/provisioning plus authenticated Supabase-backed vault sync

Rationale

Static inspection shows package-aligned MCP/CLI provisioning with remote vault sync but no unconsented npm install-time mutation, credential exfiltration, destructive behavior, or stealth persistence. Because runtime auto-pull can mutate Claude/Codex instruction surfaces from Supabase content, warn rather than mark clean.

Evidence

package.jsondist/cli.jsdist/mcp-server.jsdist/lib/client-configs.jsdist/lib/provision.jsdist/lib/vault-source.jsdist/lib/dependencies.jsdist/auth.jsdist/constants.jsbundle/commands/init-specs.mdbundle/commands/apply-spec.md

Source & flagged code

7 flagged · loading source

dist/constants.jsView file

4patternName = supabase_service_key severity = critical line = 4 matchedText = export c...-4';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/constants.jsView on unpkg · L4

4patternName = supabase_service_key severity = critical line = 4 matchedText = export c...-4';

Critical

Secret Pattern

Supabase service role key (JWT) in dist/constants.js

dist/constants.jsView on unpkg · L4

dist/lib/cowork-extension.jsView file

•matchType = normalized_sha256 matchedPackage = @noclaf/mcp@0.3.6 matchedPath = dist/lib/cowork-extension.js matchedIdentity = npm:QG5vY2xhZi9tY3A:0.3.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/cowork-extension.jsView on unpkg

dist/cli.jsView file

•matchType = normalized_sha256 matchedPackage = @noclaf/mcp@0.3.6 matchedPath = dist/cli.js matchedIdentity = npm:QG5vY2xhZi9tY3A:0.3.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @noclaf/mcp@0.3.4 matchedIdentity = npm:QG5vY2xhZi9tY3A:0.3.4 similarity = 0.878 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

dist/lib/dependencies.jsView file

•matchType = normalized_sha256 matchedPackage = @noclaf/mcp@0.3.6 matchedPath = dist/lib/dependencies.js matchedIdentity = npm:QG5vY2xhZi9tY3A:0.3.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/dependencies.jsView on unpkg

dist/lib/client-install.jsView file

•matchType = normalized_sha256 matchedPackage = @noclaf/mcp@0.3.6 matchedPath = dist/lib/client-install.js matchedIdentity = npm:QG5vY2xhZi9tY3A:0.3.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/client-install.jsView on unpkg