Loading npm security reports…

aidex-mcp@2.4.0: AI-agent control-surface risk | LPM Firewall

registry / aidex-mcp / 2.4.0

aidex-mcp@2.4.0

MCP Server for persistent code indexing. Gives AI assistants (Claude, Gemini, Copilot, Cursor) instant access to your codebase. 50x less context than grep.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically modifies user-wide controls belonging to multiple AI clients. It registers the package and installs instructions that redirect agent behavior without a consent prompt.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall when the built entrypoint exists and neither AIDEX_NO_SETUP nor CI disables setup.

Impact

Future agent sessions inherit package-selected tool preferences and automatic indexing instructions across projects.

Mechanism

The lifecycle script invokes the setup command, which writes foreign client configurations and appends or replaces global agent instruction blocks.

Policy narrative

Installing the package launches its setup command automatically. Setup detects installed AI clients, registers AiDex in their user configurations, and writes global Claude and Gemini instruction files. Those instructions mandate package-preferred search behavior and automatic initialization. The opt-out environment variable does not provide affirmative consent for these default changes to foreign agent controls.

AI rationale

Inspected source establishes an automatic postinstall chain that mutates foreign, user-wide AI-agent configurations and instructions without consent. This meets the explicit blocking policy regardless of the package-aligned local server or available opt-out.

Evidence

package.jsonscripts/postinstall.mjsbuild/index.jsbuild/commands/setup.js.claude/CLAUDE.md.gemini/GEMINI.md.cursor/mcp.json

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

build/embeddings/index.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

build/embeddings/index.js#virtual:normalized:round1View on unpkg

build/viewer/server.jsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.3.0 matchedPath = build/viewer/server.js matchedIdentity = npm:YWlkZXgtbWNw:2.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/viewer/server.jsView on unpkg

build/commands/setup.jsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.3.0 matchedPath = build/commands/setup.js matchedIdentity = npm:YWlkZXgtbWNw:2.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/commands/setup.jsView on unpkg

build/viewer/progress.jsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.3.0 matchedPath = build/viewer/progress.js matchedIdentity = npm:YWlkZXgtbWNw:2.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/viewer/progress.jsView on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.3.0 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:YWlkZXgtbWNw:2.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 1-40json

1{

2 "name": "aidex-mcp",

3 "version": "2.4.0",

4 "mcpName": "io.github.CSCSoftware/aidex",

5 "description": "MCP Server for persistent code indexing. Gives AI assistants (Claude, Gemini, Copilot, Cursor) instant access to your codebase. 50x less context than grep.",

6 "main": "build/index.js",

7 "bin": {

8 "aidex": "build/index.js",

9 "aidex-mcp": "build/index.js"

10 },

11 "type": "module",

12 "scripts": {

13 "build": "tsc && npm run copy-assets",

14 "copy-assets": "node -e \"const fs=require('fs');fs.cpSync('src/db/schema.sql','build/db/schema.sql');fs.cpSync('src/db/global-schema.sql','build/db/global-schema.sql');fs.cpSync('src/embeddings/schema.sql','build/embeddings/schema.sql')\"",

15 "watch": "tsc --watch",

16 "start": "node build/index.js",

17 "dev": "tsc && node build/index.js",

18 "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",

19 "clean": "rimraf build",

20 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L20

21 "prepublishOnly": "npm run build"

22 },

23 "keywords": [

24 "mcp",

25 "mcp-server",

26 "model-context-protocol",

27 "claude",

28 "claude-code",

29 "claude-desktop",

30 "gemini",

31 "gemini-cli",

32 "copilot",

33 "github-copilot",

34 "vscode",

35 "cursor",

36 "windsurf",

37 "ai",

38 "ai-coding",

39 "ai-assistant",

40 "ai-tools",

build/embeddings/index.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

build/embeddings/index.js#virtual:normalized:round1View on unpkg

build/viewer/server.jsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.3.0 matchedPath = build/viewer/server.js matchedIdentity = npm:YWlkZXgtbWNw:2.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/viewer/server.jsView on unpkg

build/commands/setup.jsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.3.0 matchedPath = build/commands/setup.js matchedIdentity = npm:YWlkZXgtbWNw:2.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/commands/setup.jsView on unpkg

build/viewer/progress.jsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.3.0 matchedPath = build/viewer/progress.js matchedIdentity = npm:YWlkZXgtbWNw:2.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

build/viewer/progress.jsView on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = aidex-mcp@2.3.0 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:YWlkZXgtbWNw:2.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg