Loading npm security reports…

codesift-mcp@0.15.3: AI-agent control-surface risk | LPM Firewall

registry / codesift-mcp / 0.15.3

codesift-mcp@0.15.3

MCP server for code intelligence — 146 tools for symbol search, call graph, semantic search, route tracing, community detection, LSP bridge, secret detection, conversation search, and Hono framework intelligence

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall automatically mutates multiple AI-agent configurations, enables hooks, and installs a global Git hook. This is unconsented broad AI-agent control-surface modification.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm installation executes postinstall.

Impact

Future AI-client sessions and Git commits can invoke CodeSift without an explicit setup command.

Mechanism

automatic cross-platform MCP, hook, rule, and Git-hook installation

Policy narrative

On installation, the package runs `setup all` without user interaction. That command enables hooks and rules by default, registers CodeSift in Codex, Claude, Cursor, Gemini, Antigravity, and Kimi, configures Claude tool-event hooks, modifies Codex approval settings for its MCP server, writes agent instruction files, and installs a global Git post-commit hook. This is a broad foreign AI-agent control-surface mutation triggered solely by npm postinstall.

Rationale

The lifecycle hook performs the exact unconsented broad AI-agent configuration mutation reserved for blocking. The setup is package-owned but crosses multiple external agent configurations and adds persistent hooks automatically.

Evidence

package.jsondist/cli/commands-admin.jsdist/cli/setup.jsdist/cli/setup/mcp.jsdist/cli/setup/codex.jsdist/cli/setup/claude.jsdist/cli/git-hooks-installer.js~/.codex/config.toml

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./dist/cli.js setup all 2>/dev/null && echo ' ✨ CodeSift MCP installed and configured for all platforms. ⚠️ Restart your AI client (Cmd+Q for Claude Code) to load new MCP...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./dist/cli.js setup all 2>/dev/null && echo ' ✨ CodeSift MCP installed and configured for all platforms. ⚠️ Restart your AI client (Cmd+Q for Claude Code) to load new MCP...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/tools/patterns/adapters/php.jsView file

11regex: /\beval\s*\(/, L12: description: "eval() usage — code injection risk (PHP)", L13: },

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/tools/patterns/adapters/php.jsView on unpkg · L11

dist/tools/pg-introspection.jsView file

13const pgSpecifier = "pg"; L14: const mod = (await import(/* @vite-ignore */ pgSpecifier)); L15: // Handle both ESM default-export and CJS named-export shapes.

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/pg-introspection.jsView on unpkg · L13

dist/tools/index-tools/snapshots.jsView file

118const raw = await readFile(versionsPath, "utf-8"); L119: storedVersions = JSON.parse(raw); L120: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/tools/index-tools/snapshots.jsView on unpkg · L118

dist/cli/service.jsView file

6import { fileURLToPath } from "node:url"; L7: import { execFileSync } from "node:child_process"; L8: /** ... L66: export function buildServicePlan(opts) { L67: const home = opts.home ?? homedir(); L68: const os = opts.os ?? platform(); ... L83: unitPath, L84: stdoutLog: join(logDir, "daemon.out.log"), L85: stderrLog: join(logDir, "daemon.err.log"), ... L150: Description=CodeSift shared MCP daemon L151: Documentation=https://github.com/greglas75/codesift L152: After=network.target

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli/service.jsView on unpkg · L6

dist/parser/languages/tree-sitter-go.wasmView file

•path = dist/parser/languages/tree-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/parser/languages/tree-sitter-go.wasmView on unpkg

hooks/hook-chain.shView file

•path = hooks/hook-chain.sh kind = build_helper sizeBytes = 207 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/hook-chain.shView on unpkg

dist/server.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.15.2 matchedPath = dist/server.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.15.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server.jsView on unpkg

dist/tools/project-profile-extractors.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.15.2 matchedPath = dist/tools/project-profile-extractors.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.15.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/project-profile-extractors.jsView on unpkg

dist/register-tools/runtime.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.15.2 matchedPath = dist/register-tools/runtime.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.15.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/register-tools/runtime.jsView on unpkg

dist/tools/dependency-audit-freshness-tools.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.15.2 matchedPath = dist/tools/dependency-audit-freshness-tools.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.15.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/dependency-audit-freshness-tools.jsView on unpkg

dist/tools/dependency-audit-vulnerability-tools.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.15.2 matchedPath = dist/tools/dependency-audit-vulnerability-tools.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.15.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/dependency-audit-vulnerability-tools.jsView on unpkg