chron-mcp@0.1.59: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

chron-mcp@0.1.59: AI-agent control-surface risk | LPM Firewall

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node dist/cli/index.js setup 2>/dev/null || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node dist/cli/index.js setup 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

6913"use strict"; L6914: var childProcess = require("child_process"); L6915: var { isLinux, getReport } = require_process();

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L6913

40705try { L40706: (0, import_child_process.execSync)("claude mcp add chron -- npx -y chron-mcp", { stdio: "pipe" }); L40707: } catch {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L40705

•matchType = normalized_sha256 matchedPackage = chron-mcp@0.1.55 matchedPath = dist/index.js matchedIdentity = npm:Y2hyb24tbWNw:0.1.55 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

11}; L12: var __commonJS = (cb, mod) => function __require() { L13: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L11

41124site.name = fn.name; L41125: var deprecatedfn = new Function( L41126: "fn",

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L41124

751error: new (_Err ?? $ZodError)(result.issues.map((iss) => finalizeIssue(iss, ctx, config()))) L752: } : { success: true, data: result.value }; L753: }; ... L790: } L791: var cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, hostname, e164, dateSource, date, string, integer, nu... L792: var init_regexes = __esm({ ... L1726: try { L1727: new URL(`http://[${payload.value}]`); L1728: } catch { ... L6662: cache: { L6663: values: ["shared", "private"], L6664: update: (key, value) => connectionQueryParams.push(`${key}=${value}`)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L751

dist/cli/index.jsView file

•Default external logging endpoint and rich-record POST in dist/cli/index.js: // node_modules/drizzle-orm/subquery.js var Subquery, WithSubquery; var init_subquery = __esm({ "node_modules/drizzle-orm/subquery.js"() { Subquery = class { static [entityKind] = "Subquery"; brand: "Subquery", WithSubquery = class extends Subquery {

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/cli/index.jsView on unpkg

64"skills", L65: ".claude-plugin", L66: "assets", ... L16644: if (!path.startsWith(":")) { L16645: (0, import_fs.mkdirSync)((0, import_path.dirname)(path), { recursive: true }); L16646: } ... L18097: }); L18098: (0, import_fs2.writeFileSync)(outputPath, html, "utf8"); L18099: } ... L20002: ); L20003: (0, import_fs3.writeFileSync)(outputPath, html, "utf8"); L20004: process.stdout.write(

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli/index.jsView on unpkg · L64

•matchType = previous_version_dangerous_delta matchedPackage = chron-mcp@0.1.44 matchedIdentity = npm:Y2hyb24tbWNw:0.1.44 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

Source & flagged code

15 flagged

package.jsonView file

Lines 23-63json

23 },

24 "files": [

25 "dist",

26 "skills",

27 ".claude-plugin",

28 "assets",

29 "dashboards",

30 "README.md"

31 ],

32 "engines": {

33 "node": ">=18"

34 },

35 "scripts": {

36 "build": "npx esbuild src/index.ts --bundle --format=cjs --outfile=dist/index.js --platform=node && chmod +x dist/index.js && npx esbuild src/cli/index.ts --bundle --format=cjs --outfile=dist/cli/index.js --platform=node && chmod +x dist/cli/index.js",

37 "build:cli": "npx esbuild src/cli/index.ts --bundle --format=cjs --outfile=dist/cli/index.js --platform=node && chmod +x dist/cli/index.js",

38 "typecheck": "tsc --noEmit",

39 "dev": "tsc --watch",

40 "start": "node dist/index.js",

41 "test": "vitest run",

42 "test:watch": "vitest",

43 "postinstall": "node dist/cli/index.js setup 2>/dev/null || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L43

44 "prepublishOnly": "npm run typecheck && npm test && npm run build"

45 },

46 "keywords": [

47 "mcp",

48 "ai",

49 "audit",

50 "logging",

51 "claude",

52 "cursor"

53 ],

54 "license": "SEE LICENSE IN LICENSE",

55 "dependencies": {

56 "@libsql/client": "^0.17.3",

57 "@modelcontextprotocol/sdk": "^1.30.0",

58 "drizzle-orm": "^0.45.2",

59 "express": "^4.22.2",

60 "uuid": "^11.1.1",

61 "zod": "^3.22.4"

62 },

63 "devDependencies": {

dist/index.jsView file

6913"use strict"; L6914: var childProcess = require("child_process"); L6915: var { isLinux, getReport } = require_process();

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L6913

40705try { L40706: (0, import_child_process.execSync)("claude mcp add chron -- npx -y chron-mcp", { stdio: "pipe" }); L40707: } catch {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L40705

•matchType = normalized_sha256 matchedPackage = chron-mcp@0.1.55 matchedPath = dist/index.js matchedIdentity = npm:Y2hyb24tbWNw:0.1.55 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

11}; L12: var __commonJS = (cb, mod) => function __require() { L13: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli/index.jsView file

•Default external logging endpoint and rich-record POST in dist/cli/index.js: // node_modules/drizzle-orm/subquery.js var Subquery, WithSubquery; var init_subquery = __esm({ "node_modules/drizzle-orm/subquery.js"() { Subquery = class { static [entityKind] = "Subquery"; brand: "Subquery", WithSubquery = class extends Subquery {

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/cli/index.jsView on unpkg

64"skills", L65: ".claude-plugin", L66: "assets", ... L16644: if (!path.startsWith(":")) { L16645: (0, import_fs.mkdirSync)((0, import_path.dirname)(path), { recursive: true }); L16646: } ... L18097: }); L18098: (0, import_fs2.writeFileSync)(outputPath, html, "utf8"); L18099: } ... L20002: ); L20003: (0, import_fs3.writeFileSync)(outputPath, html, "utf8"); L20004: process.stdout.write(

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli/index.jsView on unpkg · L64

•matchType = previous_version_dangerous_delta matchedPackage = chron-mcp@0.1.44 matchedIdentity = npm:Y2hyb24tbWNw:0.1.44 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.