registry / @papi-ai/server / 0.7.79
@papi-ai/server@0.7.79
PAPI MCP server — AI-powered sprint planning, build execution, and strategy review for software projects
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/backfill-cycle-metrics.jsView file
81});
L82: import { execFileSync, spawnSync } from "child_process";
L83: function isGitAvailable() {
High
Child Process
Package source references child process execution.
dist/backfill-cycle-metrics.jsView on unpkg · L814432try {
L4433: const email = execSync("git config user.email", { encoding: "utf8", timeout: 5e3 }).trim();
L4434: if (email) return email;
...
L4443: }
L4444: var HOSTED_SUPABASE_URL2 = process.env["PAPI_HOSTED_SUPABASE_URL"] ?? "https://guewgygcpcmrcoppihzx.supabase.co";
L4445: var HOSTED_PROXY_ENDPOINT = `${HOSTED_SUPABASE_URL2}/functions/v1/data-proxy`;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/backfill-cycle-metrics.jsView on unpkg · L4432dist/index.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { mkdirSync, readFileSync, writeFileSync, chmodSync } from "fs";
writeFileSync(INSTALL_ID_FILE, JSON.stringify(contents, null, 2), { mode: 384 });
"Authorization": `Bearer ${apiKey}`
"Authorization": `Bearer ${MD_PINGS_ANON_KEY}`,
"Authorization": `Bearer ${this.apiKey}`
"Authorization": `Bearer ${this.apiKey}`
"Authorization": `Bearer ${this.apiKey}`
`Auth: Invalid API key \u2014 PAPI_DATA_API_KEY was rejected by the proxy.
Findings
6 High4 Medium5 Low
HighChild Processdist/backfill-cycle-metrics.js
HighShell
HighSame File Env Network Executiondist/backfill-cycle-metrics.js
HighCredential Redirect Persistencedist/index.js
HighEntrypoint Foreign Package Code Overwritedist/index.js
HighCommand Output Exfiltrationdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdesign-assets/hooks/frontend-design-guard.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/index.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @papi-ai/server@0.7.79.
See all versions of @papi-ai/server for other recorded verdicts.
- Review the evidence and your use of @papi-ai/server@0.7.79 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.