registry / @onyxsecurity/mcp-gateway / 1.0.128

@onyxsecurity/mcp-gateway@1.0.128

⚠ Under review

A TypeScript SSE proxy for MCP servers that use stdio transport.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 18 file(s), 809 KB of source, external domains: example.com, github.com

Source & flagged code

6 flagged

dist/transportDetection-G_-ghEhJ.jsView file

Lines 1-21javascript

1import{OAuthError as e,SSEClientTransport as t,StreamableHTTPClientTransport as n,discoverAuthorizationServerMetadata as r,discoverOAuthProtectedResourceMetadata as i,exchangeAuthorization as a,normalizeUrl as o,refreshAuthorization as s,registerClient as c,startAuthorization as l}from"./normalizeUrl-BrUSzVK4.js";import{config as u}from"./env-9uP55_wl.js";import{logger as d}from"./logger-Kc_WXaXv.js";import{findProviderForUrl as f}from"./providers-CG1XRsxS.js";import{platform as p}from"node:os";import{URL as m}from"node:url";import{createServer as h}from"node:http";import{execFile as g}from"no ...

2<html lang="en">

High

Child Process

Package source references child process execution.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

3<head>

4 <meta charset="UTF-8">

5 <meta name="viewport" content="width=device-width, initial-scale=1.0">

6 <title>Authorization Successful</title>

7 <style>

8 body {

9 font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;

10 display: flex;

11 justify-content: center;

12 align-items: center;

13 min-height: 100vh;

14 margin: 0;

15 background: linear-gradient(135deg, #1a1a2e 0%, #16213e 100%);

16 color: #fff;

17 }

18 .container {

19 text-align: center;

20 padding: 2rem;

21 }

Long lines were clipped for display.

dist/helpers-BrpBfS5F.jsView file

Lines 1-21javascript

Source & flagged code

6 flagged · loading source

dist/transportDetection-G_-ghEhJ.jsView file

1import{OAuthError as e,SSEClientTransport as t,StreamableHTTPClientTransport as n,[redacted] as r,[redacted] as i,exchangeAutho... L2: <html lang="en">

High

Child Process

Package source references child process execution.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

1import{OAuthError as e,SSEClientTransport as t,StreamableHTTPClientTransport as n,[redacted] as r,[redacted] as i,exchangeAutho... L2: <html lang="en">

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

1import{OAuthError as e,SSEClientTransport as t,StreamableHTTPClientTransport as n,[redacted] as r,[redacted] as i,exchangeAutho... L2: <html lang="en">

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

dist/helpers-BrpBfS5F.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @onyxsecurity/mcp-gateway@1.0.121 matchedIdentity = npm:[redacted]:1.0.121 similarity = 0.722 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/helpers-BrpBfS5F.jsView on unpkg

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/helpers-BrpBfS5F.jsView on unpkg · L1

1import{__commonJSMin as e,__toESM as t}from"./chunk-CrDKVgUD.js";import{createRequire as n}from"node:module";import{readFileSync as r,readdirSync as i}from"node:fs";import{format a... L2: `).map(e=>e.split(` `)),n=0;return t.forEach(e=>{e.length>1&&C.stringWidth(e[0])>n&&(n=Math.min(Math.floor(this.width*.5),C.stringWidth(e[0])))}),t.forEach(e=>{this.div(...e.map((t... ... L4: `):e.text.split(` L5: `),e.border&&(r.unshift(`.`+`-`.repeat(this.negatePadding(e)+2)+`.`),r.push(`'`+`-`.repeat(this.negatePadding(e)+2)+`'`)),e.padding&&(r.unshift(...Array(e.padding[0]||0).fill(``)),... L6: `),l=[...c],u=0;for(let[e,t]of l.entries()){if(r+=t,Me.has(t)){let{groups:e}=RegExp(`(?:\\[(?<code>\\d+)m|\\${Ne}(?<uri>.*))`).exec(c.slice(u))||{groups:{}};if(e.code!==void 0){le... ... L29: */ L30: var D;(function(e){e.BOOLEAN=`boolean`,e.STRING=`string`,e.NUMBER=`number`,e.ARRAY=`array`})(D||={});let O;var qe=class{constructor(e){O=e}parse(e,t){let n=Object.assign({alias:voi... L31: `);b.div(`${e}\n`)}return b.toString().replace(/\s*$/,``)};function _(e,n,r){let i=0;return Array.isArray(e)||(e=Object.values(e).map(e=>[e])),e.forEach(e=>{i=Math.max(t.stringWidt... ... L35: # L36: # Installation:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/helpers-BrpBfS5F.jsView on unpkg · L1

Findings

1 Critical3 High5 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/helpers-BrpBfS5F.js

HighChild Processdist/transportDetection-G_-ghEhJ.js

HighSame File Env Network Executiondist/transportDetection-G_-ghEhJ.js

HighCommand Output Exfiltrationdist/transportDetection-G_-ghEhJ.js

MediumDynamic Requiredist/helpers-BrpBfS5F.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/helpers-BrpBfS5F.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

6 flagged

dist/transportDetection-G_-ghEhJ.jsView file

Lines 1-21javascript

2<html lang="en">

High

Child Process

Package source references child process execution.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

3<head>

4 <meta charset="UTF-8">

5 <meta name="viewport" content="width=device-width, initial-scale=1.0">

6 <title>Authorization Successful</title>

7 <style>

8 body {

9 font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;

10 display: flex;

11 justify-content: center;

12 align-items: center;

13 min-height: 100vh;

14 margin: 0;

15 background: linear-gradient(135deg, #1a1a2e 0%, #16213e 100%);

16 color: #fff;

17 }

18 .container {

19 text-align: center;

20 padding: 2rem;

21 }

Long lines were clipped for display.

dist/helpers-BrpBfS5F.jsView file

Lines 1-21javascript