registry / blogger-publisher / 1.3.4
blogger-publisher@1.3.4
A powerful CLI to automate your Blogger publishing using Markdown, Multi-CDN, and AI Agents.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource implements a user-invoked Blogger publisher/MCP server; sensitive values support the configured service operations and are not harvested or exfiltrated. No install-time execution or concrete malicious chain was found.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
User runs the CLI or explicitly configures and starts mcp-blogger-server.
Impact
Can modify the user's Blogger content only through explicitly invoked commands or MCP tools using user-provided credentials.
Mechanism
OAuth-authenticated Blogger API and image-CDN operations
AI rationale
Source implements a user-invoked Blogger publisher/MCP server; sensitive values support the configured service operations and are not harvested or exfiltrated. No install-time execution or concrete malicious chain was found.
Evidence
package.jsonbin/cli.jsbin/mcp-server.jslib/publisher.jslib/tui.jslib/config.jslib/uploaders/github.jslib/mcp/server.jslib/auth.jslib/uploader.jslib/uploaders/imgbb.jslib/uploaders/drive.jslib/uploaders/cloudinary.jslib/updater.jslib/pull.jslib/mcp/resources.jsAGENT.md
Network endpoints4
registry.npmjs.org/blogger-publisher/latestapi.github.com/repos/${repo}/contents/${gitPath}api.imgbb.com/1/uploaddrive.google.com/thumbnail?id=${fileId}&sz=w1000
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has no preinstall/install/postinstall hooks.
- bin/cli.js only runs after explicit CLI invocation.
- Network calls are Blogger publishing, selected image uploads, and npm update checking.
- Credentials remain local in ~/.blogger-publisher/config.json; no source exfiltration path found.
- lib/tui.js references fs without importing it, so its optional AGENT.md copy path cannot execute as written.
- No shell execution, eval, dynamic loading, or foreign agent-config writes found.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flagged · loading sourcelib/uploaders/github.jsView file
•matchType = normalized_sha256
matchedPackage = blogger-publisher@1.3.2
matchedPath = lib/uploaders/github.js
matchedIdentity = npm:YmxvZ2dlci1wdWJsaXNoZXI:1.3.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/uploaders/github.jsView on unpkg1const axios = require('axios');
L2: const fs = require('fs');
...
L6: async function uploadImageToGitHub(authClient, localFilePath) {
L7: const token = process.env.GITHUB_TOKEN;
L8: const repo = process.env.GITHUB_REPO; // format: username/repo
...
L23: const uniqueFileName = `${hash}-${fileName}`;
L24: const imageBase64 = fileBuffer.toString('base64');
L25:
Low
Weak Crypto
Package source references weak cryptographic algorithms.
lib/uploaders/github.jsView on unpkg · L1lib/uploaders/imgbb.jsView file
•
Findings
3 High2 Medium5 Low
HighKnown Malware Source Similaritylib/uploaders/github.js
HighKnown Malware Source Similaritylib/uploaders/imgbb.js
HighKnown Malware Source Similaritylib/uploaders/drive.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowWeak Cryptolib/uploaders/github.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to blogger-publisher@1.3.4.
See all versions of blogger-publisher for other recorded verdicts.
- Review the evidence and your use of blogger-publisher@1.3.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.