Loading npm security reports…

fa-mcp-sdk@0.12.72: Malicious npm security report (Block) | LPM Firewall

registry / fa-mcp-sdk / 0.12.72

fa-mcp-sdk@0.12.72

Core infrastructure and templates for building Model Context Protocol (MCP) servers with TypeScript

OSV Malicious Advisory

scanned 10d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-12789 confirms this npm version as malicious. The package includes cli-template/update.cjs, an update helper that combines several install/update-time capabilities: it imports child_process, https, fs, and os; reads os.hostname() and other system identifiers; issues https.request POST calls to a remote endpoint; performs filesystem existence checks; and calls spawn('/bin/bash',...) to execute shell commands...

Advisory

MAL-2026-12789

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in fa-mcp-sdk (npm)

Details

The package includes cli-template/update.cjs, an update helper that combines several install/update-time capabilities: it imports child_process, https, fs, and os; reads os.hostname() and other system identifiers; issues https.request POST calls to a remote endpoint; performs filesystem existence checks; and calls spawn('/bin/bash',...) to execute shell commands. The composition — host identifier collection, arbitrary shell execution via /bin/bash, and outbound HTTPS POST inside a self-updater — provides a mechanism to run remote-directed commands on machines that install or run this package. Additional files under dist/core/ (agent-tester/services/TesterMcpClientService.js, web/server-http.js) exercise ping/HTTP GET/POST patterns consistent with host reachability probing and outbound command/data flow.

Decision reason

One or more suspicious static signals were detected.

References

OSV advisory PACKAGE

Decision evidence

Source & flagged code

12 flagged

dist/core/bootstrap/init-config.jsView file

Lines 62-89javascript

62 else if (urlRe.test(trim(homepage))) {

63 cfg.repo = urlRe.exec(homepage)?.[0] || '';

64 }

65 const pst = cfg.webServer?.auth?.permanentServerTokens;

66 if (typeof pst === 'string' && pst.includes(',')) {

67 cfg.webServer.auth.permanentServerTokens = pst.split(',').map(trim);

68 }

69 if (cfg.ad?.domains?.MYDOMAIN) {

70 delete cfg.ad.domains.MYDOMAIN;

71 }

72 return cfg;

73}

74export const appConfig = buildConfig();

75/**

76 * Returns configuration with sensitive data masked for safe display

77 */

78export function getSafeAppConfig() {

79 const cfg = JSON.parse(JSON.stringify(appConfig)); // Deep clone

80 // Mask database password

81 if (cfg.db?.postgres?.dbs?.main?.password) {

82 cfg.db.postgres.dbs.main.password = '[MASKED]';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/core/bootstrap/init-config.jsView on unpkg · L82

83 }

84 return cfg;

85}

86export function getProjectData() {

87 return global.__MCP_PROJECT_DATA__;

88}

89//# sourceMappingURL=init-config.js.map

dist/core/web/server-http.jsView file

Lines 698-738javascript

698 logger.info(`MCP SSE resumability enabled (in-memory, max ${appConfig.mcp.sse?.maxStoredEvents ?? 1000} events)`);

699 }

700 const evictOldestSession = (

scripts/kill-port.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * Kill process on specified port (cross-platform)

4 * Usage: node scripts/kill-port.js [port_number]

5 */

7import { exec } from 'child_process';

8import { promisify } from 'util';

cli-template/deploy/srv.cjsView file

Lines 1-40javascript

1#!/usr/bin/env node

3/**

4 * srv.cjs - Unified systemd service management script (Node.js version)

5 * Analog of deploy/srv.sh

6 * Can be run from project root or from deploy/ directory

7 */

8const version = '2025-11-26-08:46';

cli-template/deploy/pm2.config.jsView file

Lines 1-21javascript

1require('dotenv').config({ path: './.env', debug: true });

2const { name, main } = require('../package.json');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

cli-template/deploy/pm2.config.jsView on unpkg · L1

dist/core/agent-tester/services/TesterMcpClientService.jsView file

Lines 304-344javascript

304 return headers;

305 }

306 }

307 }

308 }

309 finally {

310 try {

311 await

bin/fa-mcp.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

3import fss from 'fs';

4import fs from 'fs/promises';

5import path from 'path';

6import readline from

cli-template/update.cjsView file

6const path = require('path'); L7: const https = require('https'); L8: const YAML = require('yaml'); L9: const { execSync, spawn } = require('child_process'); L10: const os = require('os'); ... L15: // Name of this folder L16: const scriptDirName = require('path').basename(__dirname); L17: // Changing the working directory to a script directory ... L65: ly: (text) => console.log(color.ly(text)), L66: lg_no_newline: (msg) => process.stdout.write(color.lg(msg)), L67: }; ... L145: // Write back only the last 10KB

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli-template/update.cjsView on unpkg · L6

scripts/cc-hook-oxlint-oxfmt-fix.cjsView file

73try { L74: const output = execSync(`npx oxlint --fix "${filePath}"`, { L75: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/cc-hook-oxlint-oxfmt-fix.cjsView on unpkg · L73

cli-template/deploy/pm2reg.shView file

•path = cli-template/deploy/pm2reg.sh kind = build_helper sizeBytes = 1382 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

cli-template/deploy/pm2reg.shView on unpkg

config/local-test.yamlView file

17patternName = generic_password severity = medium line = 17 matchedText = password...ass'

Medium

Secret Pattern

Hardcoded password in config/local-test.yaml

config/local-test.yamlView on unpkg · L17

Source & flagged code

12 flagged · loading source

dist/core/bootstrap/init-config.jsView file

82patternName = generic_password severity = medium line = 82 matchedText = cfg.db.p...D]';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/core/bootstrap/init-config.jsView on unpkg · L82

dist/core/web/server-http.jsView file

718if (req.body?.method !== 'tools/call') { L719: await exec(); L720: return;

High

Child Process

Package source references child process execution.

dist/core/web/server-http.jsView on unpkg · L718

scripts/kill-port.jsView file

9L10: const execAsync = promisify(exec); L11: const port = process.argv[2];

High

Shell

Package source references shell execution.

scripts/kill-port.jsView on unpkg · L9

cli-template/deploy/srv.cjsView file

20const os = require('os'); L21: const { execSync, spawn, spawnSync } = require('child_process'); L22: L23: /* Script configuration */ L24: const SCRIPT_DIR = __dirname; // deploy/ L25: const PROJECT_ROOT = path.resolve(SCRIPT_DIR, '..'); // Project root ... L43: } catch (e) { L44: // Attach stderr to error message for easier diagnosis L45: const stderr = e.stderr ? e.stderr.toString() : ''; ... L66: Options: L67: -n <name> - Alternative service name (default: from package.json) L68: -v <version> - Node.js version (default: auto-detected)

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

cli-template/deploy/srv.cjsView on unpkg · L20

239// Try dynamic import L240: cfg = await new Function('p', 'return import(p)')('config'); L241: cfg = cfg.default || cfg;

Low

Eval

Package source references a known benign dynamic code generation pattern.

cli-template/deploy/srv.cjsView on unpkg · L239

cli-template/deploy/pm2.config.jsView file

1require('dotenv').config({ path: './.env', debug: true }); L2: const { name, main } = require('../package.json');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

cli-template/deploy/pm2.config.jsView on unpkg · L1

dist/core/agent-tester/services/TesterMcpClientService.jsView file

324logger.info(`Fetching used headers from: ${headersUrl}`); L325: const response = await fetch(headersUrl, { method: 'GET', headers: { Accept: 'application/json' } }); L326: if (response.ok) { L327: const headers = await response.json(); L328: if (Array.isArray(headers)) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/agent-tester/services/TesterMcpClientService.jsView on unpkg · L324

bin/fa-mcp.jsView file

13Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: sensitive-file+network L13: const __filename = fileURLToPath(import.meta.url); L14: const __dirname = path.dirname(__filename); L15: const PRINT_FILLED = true; ... L31: L32: const pjContent = fss.readFileSync(path.join(PROJ_ROOT, 'package.json')); L33: L34: const faMcpSdkVersion = JSON.parse(pjContent).version; L35: ... L62: input: process.stdin, L63: output: process.stdout, L64: }); ... L926: if (filePath.endsWith('test-sse-npm-package.js')) {

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/fa-mcp.jsView on unpkg · L13

cli-template/update.cjsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli-template/update.cjsView on unpkg · L6

scripts/cc-hook-oxlint-oxfmt-fix.cjsView file

73try { L74: const output = execSync(`npx oxlint --fix "${filePath}"`, { L75: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/cc-hook-oxlint-oxfmt-fix.cjsView on unpkg · L73

cli-template/deploy/pm2reg.shView file

•path = cli-template/deploy/pm2reg.sh kind = build_helper sizeBytes = 1382 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

cli-template/deploy/pm2reg.shView on unpkg

config/local-test.yamlView file

17patternName = generic_password severity = medium line = 17 matchedText = password...ass'

Medium

Secret Pattern

Hardcoded password in config/local-test.yaml

config/local-test.yamlView on unpkg · L17

Source & flagged code

12 flagged

dist/core/bootstrap/init-config.jsView file

Lines 62-89javascript

62 else if (urlRe.test(trim(homepage))) {

63 cfg.repo = urlRe.exec(homepage)?.[0] || '';

64 }

65 const pst = cfg.webServer?.auth?.permanentServerTokens;

66 if (typeof pst === 'string' && pst.includes(',')) {

67 cfg.webServer.auth.permanentServerTokens = pst.split(',').map(trim);

68 }

69 if (cfg.ad?.domains?.MYDOMAIN) {

70 delete cfg.ad.domains.MYDOMAIN;

71 }

72 return cfg;

73}

74export const appConfig = buildConfig();

75/**

76 * Returns configuration with sensitive data masked for safe display

77 */

78export function getSafeAppConfig() {

79 const cfg = JSON.parse(JSON.stringify(appConfig)); // Deep clone

80 // Mask database password

81 if (cfg.db?.postgres?.dbs?.main?.password) {

82 cfg.db.postgres.dbs.main.password = '[MASKED]';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/core/bootstrap/init-config.jsView on unpkg · L82

83 }

84 return cfg;

85}

86export function getProjectData() {

87 return global.__MCP_PROJECT_DATA__;

88}

89//# sourceMappingURL=init-config.js.map

dist/core/web/server-http.jsView file

Lines 698-738javascript

698 logger.info(`MCP SSE resumability enabled (in-memory, max ${appConfig.mcp.sse?.maxStoredEvents ?? 1000} events)`);

699 }

700 const evictOldestSession = (

scripts/kill-port.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * Kill process on specified port (cross-platform)

4 * Usage: node scripts/kill-port.js [port_number]

5 */

7import { exec } from 'child_process';

8import { promisify } from 'util';

cli-template/deploy/srv.cjsView file

Lines 1-40javascript

1#!/usr/bin/env node

3/**

4 * srv.cjs - Unified systemd service management script (Node.js version)

5 * Analog of deploy/srv.sh

6 * Can be run from project root or from deploy/ directory

7 */

8const version = '2025-11-26-08:46';

cli-template/deploy/pm2.config.jsView file

Lines 1-21javascript

1require('dotenv').config({ path: './.env', debug: true });

2const { name, main } = require('../package.json');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

cli-template/deploy/pm2.config.jsView on unpkg · L1

dist/core/agent-tester/services/TesterMcpClientService.jsView file

Lines 304-344javascript

304 return headers;

305 }

306 }

307 }

308 }

309 finally {

310 try {

311 await

bin/fa-mcp.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

3import fss from 'fs';

4import fs from 'fs/promises';

5import path from 'path';

6import readline from

cli-template/update.cjsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli-template/update.cjsView on unpkg · L6

scripts/cc-hook-oxlint-oxfmt-fix.cjsView file

73try { L74: const output = execSync(`npx oxlint --fix "${filePath}"`, { L75: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/cc-hook-oxlint-oxfmt-fix.cjsView on unpkg · L73

cli-template/deploy/pm2reg.shView file

•path = cli-template/deploy/pm2reg.sh kind = build_helper sizeBytes = 1382 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

cli-template/deploy/pm2reg.shView on unpkg

config/local-test.yamlView file

17patternName = generic_password severity = medium line = 17 matchedText = password...ass'

Medium

Secret Pattern

Hardcoded password in config/local-test.yaml

config/local-test.yamlView on unpkg · L17

OSV Malicious Advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code