hostinger-api-mcp@3.7.1
MCP server for Hostinger API
AI Security Review
scanned 12h ago · by lpm-firewall-aiThe package does not send credentials to an unrelated publisher-selected default, and its manifest has no lifecycle hooks. However, the unrestricted API_BASE_URL override can direct existing Hostinger credentials to another host during an API call, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
An operator sets API_BASE_URL to another host and an API-backed tool operation runs.
Impact
The configured endpoint may receive the user's Hostinger API token.
Mechanism
The runtime builds the request URL from API_BASE_URL, obtains an environment or stored OAuth token, and sends it as a bearer token without restricting the destination host.
AI rationale
The package does not send credentials to an unrelated publisher-selected default, and its manifest has no lifecycle hooks. However, the unrestricted API_BASE_URL override can direct existing Hostinger credentials to another host during an API call, so this warrants a warning rather than a block.
Evidence
src/core/runtime.jssrc/core/oauth.js
Network endpoints1
developers.hostinger.com
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json has no lifecycle hooks, and the runtime accepts API_BASE_URL while defaulting to developers.hostinger.com.
- The OAuth provider obtains bearer tokens from environment variables or the user's stored credentials.
- When an API operation runs, the runtime resolves its URL against API_BASE_URL, attaches the bearer token, and sends the request.
Evidence against
- The default API destination is developers.hostinger.com; forwarding to another host requires an API_BASE_URL override and an API operation.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
9 flagged · loading sourcebuild.jsView file
2L3: import { exec } from 'child_process';
L4: import fs from 'fs';
High
18console.log('Compiling TypeScript...');
L19: exec('npx tsc', (error, stdout, stderr) => {
L20: if (error) {
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
build.jsView on unpkg · L18•matchType = normalized_sha256
matchedPackage = hostinger-api-mcp@3.5.0
matchedPath = build.js
matchedIdentity = npm:aG9zdGluZ2VyLWFwaS1tY3A:3.5.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
build.jsView on unpkgskills/headless/connect/bootstrap.mjsView file
Findings
10 High3 Medium4 Low
HighChild Processbuild.js
HighShell
HighRuntime Package Installbuild.js
HighKnown Malware Source Similarityskills/headless/connect/bootstrap.mjs
HighKnown Malware Source Similaritysrc/core/oauth.js
HighKnown Malware Source Similaritysrc/core/oauth.ts
HighKnown Malware Source Similaritybuild.js
HighKnown Malware Source Similaritysrc/core/skills.js
HighKnown Malware Source Similaritysrc/core/skills.ts
HighKnown Malware Source Similarityskills/headless/steps/05-design/logo-kit.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to hostinger-api-mcp@3.7.1.
See all versions of hostinger-api-mcp for other recorded verdicts.
- Review the evidence and your use of hostinger-api-mcp@3.7.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.