Loading npm security reports…

aidex-mcp@2.3.0: AI-agent control-surface risk | LPM Firewall

registry / aidex-mcp / 2.3.0

aidex-mcp@2.3.0

MCP Server for persistent code indexing. Gives AI assistants (Claude, Gemini, Copilot, Cursor) instant access to your codebase. 50x less context than grep.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall automatically mutates detected third-party AI-client MCP configurations and global instruction files. It registers the package as an MCP server and injects mandatory agent behavior without user invocation.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm install

Impact

Enables AiDex in installed AI clients and changes future agent behavior across user projects.

Mechanism

postinstall-triggered broad AI-agent configuration and instruction-file writes

Policy narrative

Installing the package executes its postinstall hook, which launches `aidex setup`. Setup detects several unrelated AI clients, writes an `aidex` MCP-server entry into their user-level configuration, and creates or appends global Claude/Gemini instruction files. The injected text imposes required tool choices and automatic actions, including initializing the package without asking. These changes occur without an explicit setup command or consent.

Rationale

This is a concrete, unconsented install-time mutation of broad third-party AI-agent control surfaces. It meets the firewall block policy even though no credential exfiltration was observed.

Evidence

package.jsonscripts/postinstall.mjsbuild/index.jsbuild/commands/setup.js~/.claude/CLAUDE.md~/.gemini/GEMINI.md~/.cursor/mcp.json~/.codeium/windsurf/mcp_config.json~/.gemini/settings.json

Source & flagged code

5 flagged

package.jsonView file

Lines 1-40json

1{

2 "name": "aidex-mcp",

3 "version": "2.3.0",

4 "mcpName": "io.github.CSCSoftware/aidex",

5 "description": "MCP Server for persistent code indexing. Gives AI assistants (Claude, Gemini, Copilot, Cursor) instant access to your codebase. 50x less context than grep.",

6 "main": "build/index.js",

7 "bin": {

8 "aidex": "build/index.js",

9 "aidex-mcp": "build/index.js"

10 },

11 "type": "module",

12 "scripts": {

13 "build": "tsc && npm run copy-assets",

14 "copy-assets": "node -e \"const fs=require('fs');fs.cpSync('src/db/schema.sql','build/db/schema.sql');fs.cpSync('src/db/global-schema.sql','build/db/global-schema.sql');fs.cpSync('src/embeddings/schema.sql','build/embeddings/schema.sql')\"",

15 "watch": "tsc --watch",

16 "start": "node build/index.js",

17 "dev": "tsc && node build/index.js",

18 "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",

19 "clean": "rimraf build",

20 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L20

21 "prepublishOnly": "npm run build"

22 },

23 "keywords": [

24 "mcp",

25 "mcp-server",

26 "model-context-protocol",

27 "claude",

28 "claude-code",

29 "claude-desktop",

30 "gemini",

31 "gemini-cli",

32 "copilot",

33 "github-copilot",

34 "vscode",

35 "cursor",

36 "windsurf",

37 "ai",

38 "ai-coding",

39 "ai-assistant",

40 "ai-tools",

build/commands/setup.jsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.2.2 matchedPath = build/commands/setup.js matchedIdentity = npm:YWlkZXgtbWNw:2.2.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/commands/setup.jsView on unpkg

build/viewer/progress.jsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.2.2 matchedPath = build/viewer/progress.js matchedIdentity = npm:YWlkZXgtbWNw:2.2.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/viewer/progress.jsView on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.2.2 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:YWlkZXgtbWNw:2.2.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg