@okx_ai/okx-trade-mcp@1.4.3: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@okx_ai/okx-trade-mcp@1.4.3: Suspicious npm security report | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts changed=test:unit

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js || exit 0

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js || exit 0

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

12import { Agent } from "undici"; L13: import { execFile } from "child_process"; L14: import { homedir } from "os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L12

1179} L1180: function execAuthTokenWindows(binPath, makePipeName = defaultWindowsPipeName) { L1181: return new Promise((resolve4, reject) => {

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L1179

1236function getAuthBinaryPath() { L1237: if (process.env.OKX_AUTH_BIN) { L1238: return process.env.OKX_AUTH_BIN; ... L1242: } L1243: function execAuthToken() { L1244: const binPath = getAuthBinaryPath(); ... L1247: function execAuthTokenUnix(binPath) { L1248: return new Promise((resolve4, reject) => { L1249: const child = spawn2(binPath, ["token"], {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1236

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index.js: writeFileSync, import { writeFileSync as writeFileSync2, renameSync as renameSync2, unlinkSync as unlinkSync2, mkdirSync as mkdirSync2 } from "fs"; import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, existsSync as existsSync3 } from "fs"; // ../../node_modules/.pnpm/smol-toml@1.6.0/node_modules/smol-toml/dist/error.js // ../../node_modules/.pnpm/smol-toml@1.6.0/node_modules/smol-toml/dist/util.js // ../../node_modules/.pnpm/smol-toml@1.6.0/node_modules/smol-toml/dist/date.js // ../../node_modules/.pnpm/smol-toml@1.6.0/node_modules/smol-toml/dist/primitive.js // ../../node_modules/.pnpm/smol-toml@

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/index.jsView on unpkg

scripts/postinstall.jsView file

9import { homedir, platform, arch } from 'node:os'; L10: import { get as httpsGet } from 'node:https'; L11: import { get as httpGet } from 'node:http'; ... L14: try { L15: const __dirname = dirname(fileURLToPath(import.meta.url)); L16: const { name, version } = JSON.parse(readFileSync(join(__dirname, '..', 'package.json'), 'utf8')); L17: L18: process.stderr.write('\n'); L19: process.stderr.write(` ${name} v${version}\n`); ... L148: async function downloadPilotBinary() { L149: if (process.env.OKX_PILOT_BINARY_PATH) return; L150:

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

scripts/postinstall.jsView on unpkg · L9

Source & flagged code

8 flagged

package.jsonView file

Lines 22-49json

22 },

23 "keywords": [

24 "okx",

25 "mcp",

26 "model-context-protocol",

27 "trading"

28 ],

29 "dependencies": {

30 "@modelcontextprotocol/sdk": "^1.26.0",

31 "smol-toml": "^1.3.4",

32 "yauzl": "^3.2.1",

33 "undici": "^6.0.0"

34 },

35 "devDependencies": {

36 "@agent-tradekit/core": "file:../core",

37 "@types/node": "^25.2.2",

38 "tsup": "^8.5.1",

39 "tsx": "^4.19.3",

40 "typescript": "^5.9.3"

41 },

42 "scripts": {

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg · L42

43 "build": "tsup && node -e \"const fs=require('fs');fs.mkdirSync('scripts',{recursive:true});fs.copyFileSync('../../scripts/postinstall-notice.js','scripts/postinstall.js')\"",

44 "typecheck": "tsc --noEmit",

45 "clean": "rm -rf dist scripts",

46 "postinstall": "node scripts/postinstall.js || exit 0",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L46

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L46

47 "test:unit": "node_modules/.bin/tsx --test --test-reporter=spec test/*.test.ts"

48 }

49}

dist/index.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2

3// src/index.ts

4import { parseArgs } from "util";

5import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

6

7// ../core/dist/index.js

8import { EnvHttpProxyAgent, setGlobalDispatcher }

scripts/postinstall.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2// Shared postinstall script — do not edit the copies in packages/*/scripts/

3// This file is the single source of truth; copies are generated during build.

4

5import { readFileSync, createWriteStream, mkdirSync, chmodSync, existsSync, unlinkSync, renameSync } from 'node:fs';

6import { createHash } from 'node:crypto';

7import { fileURLToPath }