registry / @onyxsecurity/mcp-gateway / 1.0.128

@onyxsecurity/mcp-gateway@1.0.128

⚠ Under review

A TypeScript SSE proxy for MCP servers that use stdio transport.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 18 file(s), 809 KB of source, external domains: example.com, github.com

Source & flagged code

6 flagged

dist/transportDetection-G_-ghEhJ.jsView file

Lines 1-21javascript

1import{OAuthError as e,SSEClientTransport as t,StreamableHTTPClientTransport as n,discoverAuthorizationServerMetadata as r,discoverOAuthProtectedResourceMetadata as i,exchangeAuthorization as a,normalizeUrl as o,refreshAuthorization as s,registerClient as c,startAuthorization as l}from"./normalizeUrl-BrUSzVK4.js";import{config as u}from"./env-9uP55_wl.js"

Source & flagged code

6 flagged · loading source

dist/transportDetection-G_-ghEhJ.jsView file

1import{OAuthError as e,SSEClientTransport as t,StreamableHTTPClientTransport as n,[redacted] as r,[redacted] as i,exchangeAutho... L2: <html lang="en">

High

Child Process

Package source references child process execution.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

1import{OAuthError as e,SSEClientTransport as t,StreamableHTTPClientTransport as n,[redacted] as r,[redacted] as i,exchangeAutho... L2: <html lang="en">

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

1import{OAuthError as e,SSEClientTransport as t,StreamableHTTPClientTransport as n,[redacted] as r,[redacted] as i,exchangeAutho... L2: <html lang="en">

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/transportDetection-G_-ghEhJ.jsView on unpkg · L1

dist/helpers-BrpBfS5F.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @onyxsecurity/mcp-gateway@1.0.121 matchedIdentity = npm:[redacted]:1.0.121 similarity = 0.722 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/helpers-BrpBfS5F.jsView on unpkg

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/helpers-BrpBfS5F.jsView on unpkg · L1

1import{__commonJSMin as e,__toESM as t}from"./chunk-CrDKVgUD.js";import{createRequire as n}from"node:module";import{readFileSync as r,readdirSync as i}from"node:fs";import{format a... L2: `).map(e=>e.split(` `)),n=0;return t.forEach(e=>{e.length>1&&C.stringWidth(e[0])>n&&(n=Math.min(Math.floor(this.width*.5),C.stringWidth(e[0])))}),t.forEach(e=>{this.div(...e.map((t... ... L4: `):e.text.split(` L5: `),e.border&&(r.unshift(`.`+`-`.repeat(this.negatePadding(e)+2)+`.`),r.push(`'`+`-`.repeat(this.negatePadding(e)+2)+`'`)),e.padding&&(r.unshift(...Array(e.padding[0]||0).fill(``)),... L6: `),l=[...c],u=0;for(let[e,t]of l.entries()){if(r+=t,Me.has(t)){let{groups:e}=RegExp(`(?:\\[(?<code>\\d+)m|\\${Ne}(?<uri>.*))`).exec(c.slice(u))||{groups:{}};if(e.code!==void 0){le... ... L29: */ L30: var D;(function(e){e.BOOLEAN=`boolean`,e.STRING=`string`,e.NUMBER=`number`,e.ARRAY=`array`})(D||={});let O;var qe=class{constructor(e){O=e}parse(e,t){let n=Object.assign({alias:voi... L31: `);b.div(`${e}\n`)}return b.toString().replace(/\s*$/,``)};function _(e,n,r){let i=0;return Array.isArray(e)||(e=Object.values(e).map(e=>[e])),e.forEach(e=>{i=Math.max(t.stringWidt... ... L35: # L36: # Installation:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/helpers-BrpBfS5F.jsView on unpkg · L1

Findings

1 Critical3 High5 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/helpers-BrpBfS5F.js

HighChild Processdist/transportDetection-G_-ghEhJ.js

HighSame File Env Network Executiondist/transportDetection-G_-ghEhJ.js

HighCommand Output Exfiltrationdist/transportDetection-G_-ghEhJ.js

MediumDynamic Requiredist/helpers-BrpBfS5F.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/helpers-BrpBfS5F.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

dist/helpers-BrpBfS5F.jsView file

Lines 1-21javascript

1import{__commonJSMin as e,__toESM as t}from"./chunk-CrDKVgUD.js";import{createRequire as n}from"node:module";import{readFileSync as r,readdirSync as i}from"node:fs";import{format as a,inspect as o}from"util";import{basename as s,dirname as c,extname as l,join as u,normalize as d,relative as f,resolve as p}from"path";import{notStrictEqual as m,strictEqual as h}from"assert";import{readFileSync as g,readdirSync as ee,statSync as _,writeFile as te}from"fs";import{fileURLToPath as v}from"url";let ne=null;function re(e,t=ne){if(t===null)return;let n={caller:`gateway_startup`,event:`keychain_outcome` ...

2`).map(e=>e.split(` `)),n=0;return t.forEach(e=>{e.length>1&&C.stringWidth(e[0])>n&&(n=Math.min(Math.floor(this.width*.5),C.stringWidth(e[0])))}),t.forEach(e=>{this.div(...e.map((t,r)=>({text:t.trim(),padding:this.measurePadding(t),width:r===0&&e.length>1?n:void 0})))}),this.rows[this.rows.length-1]}colFromString(e){return{text:e,padding:this.measurePadding(e)}}measurePadding(e){let t=C.stripAnsi(e);return[0,t.match(/\s*$/)[0].length,0,t.match(/^\s*/)[0].length]}toString(){let e=[];return this.rows.forEach(t=>{this.rowToString(t,e)}),e.filter(e=>!e.hidden).map(e=>e.text).join(`

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/helpers-BrpBfS5F.jsView on unpkg · L1

3`)}rowToString(e,t){return this.rasterize(e).forEach((n,r)=>{let i=``;n.forEach((n,a)=>{let{width:o}=e[a],s=this.negatePadding(e[a]),c=n;if(s>C.stringWidth(n)&&(c+=` `.repeat(s-C.stringWidth(n))),e[a].align&&e[a].align!==`left`&&this.wrap){let t=se[e[a].align];c=t(c,s),C.stringWidth(c)<s&&(c+=` `.repeat((o||0)-C.stringWidth(c)-1))}let l=e[a].padding||[0,0,0,0];l[3]&&(i+=` `.repeat(l[3])),i+=le(e[a],c,`| `),i+=c,i+=le(e[a],c,` |`),l[1]&&(i+=` `.repeat(l[1])),r===0&&t.length>0&&(i=this.renderInline(i,t[t.length-1]))}),t.push({text:i.replace(/ +$/,``),span:e.span})}),t}renderInline(e,t){let n=e.m ...

4`):e.text.split(`

5`),e.border&&(r.unshift(`.`+`-`.repeat(this.negatePadding(e)+2)+`.`),r.push(`'`+`-`.repeat(this.negatePadding(e)+2)+`'`)),e.padding&&(r.unshift(...Array(e.padding[0]||0).fill(``)),r.push(...Array(e.padding[2]||0).fill(``))),r.forEach((e,n)=>{t[n]||t.push([]);let r=t[n];for(let e=0;e<i;e++)r[e]===void 0&&r.push(``);r.push(e)})}),t}negatePadding(e){let t=e.width||0;return e.padding&&(t-=(e.padding[3]||0)+(e.padding[1]||0)),e.border&&(t-=4),t}columnWidths(e){if(!this.wrap)return e.map(e=>e.width||C.stringWidth(e.text));let t=e.length,n=this.width,r=e.map(e=>{if(e.width)return t--,n-=e.width,e.wid ...

6`),l=[...c],u=0;for(let[e,t]of l.entries()){if(r+=t,Me.has(t)){let{groups:e}=RegExp(`(?:\\[(?<code>\\d+)m|\\${Ne}(?<uri>.*))`).exec(c.slice(u))||{groups:{}};if(e.code!==void 0){let t=Number.parseFloat(e.code);i=t===39?void 0:t}else e.uri!==void 0&&(a=e.uri.length===0?void 0:e.uri)}let n=je.codes.get(Number(i));l[e+1]===`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/helpers-BrpBfS5F.jsView on unpkg · L1

7`?(a&&(r+=Fe(``)),i&&n&&(r+=Pe(n))):t===`

8`&&(i&&n&&(r+=Pe(i)),a&&(r+=Fe(a))),u+=t.length}return r};function Be(e,t,n){return String(e).normalize().replaceAll(`\r

9`,`

10`).split(`

11`).map(e=>ze(e,t,n)).join(`

12`)}function Ve(e){return me(e,{stringWidth:we,stripAnsi:ge,wrap:Be})}function He(e,t){let n=p(`.`,e),r;for(_(n).isDirectory()||(n=c(n));;){if(r=t(n,ee(n)),r)return p(n,r);if(n=c(r=n),r===n)break}}

13/**

14* @license

16* SPDX-License-Identifier: ISC

17*/

18function Ue(e){if(e!==e.toLowerCase()&&e!==e.toUpperCase()||(e=e.toLowerCase()),e.indexOf(`-`)===-1&&e.indexOf(`_`)===-1)return e;{let t=``,n=!1,r=e.match(/^-+/);for(let i=r?r[0].length:0;i<e.length;i++){let r=e.charAt(i);n&&(n=!1,r=r.toUpperCase()),i!==0&&(r===`-`||r===`_`)?n=!0:r!==`-`&&r!==`_`&&(t+=r)}return t}}function We(e,t){let n=e.toLowerCase();t||=`-`;let r=``;for(let i=0;i<e.length;i++){let a=n.charAt(i),o=e.charAt(i);a!==o&&i>0?r+=`${t}${n.charAt(i)}`:r+=o}return r}function Ge(e){return e==null?!1:typeof e==`number`||/^0x[0-9a-f]+$/i.test(e)?!0:/^0[^.]/.test(e)?!1:/^[-]?(?:\d+(?:\.\ ...

19/**

20* @license

Long lines were clipped for display.

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/helpers-BrpBfS5F.jsView on unpkg