registry / influship-api-mcp / 0.22.1

influship-api-mcp@0.22.1

The official MCP Server for the Influship API

AI Security Review

scanned 16d ago · by lpm-firewall-ai

The inspected source supports caller-invoked API code execution and local documentation search, without the external exfiltration receiver claimed by the scanner. Similarity and manifest-difference labels do not establish malicious behavior in this snapshot.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Caller invocation of an MCP tool activates code execution; no automatic install attack was found.

Impact

No covert credential export, destructive mutation, or persistence was identified in the inspected source.

Mechanism

Caller code runs in a Deno worker with network access scoped to the SDK API hostname, while optional documentation files are indexed locally.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json declares development scripts without install lifecycle hooks or a runtime self-dependency.
code-tool.js restricts Deno network access to the SDK client's API hostname.
code-tool-worker.js executes caller-supplied code against the SDK and returns its results.
local-docs-search.js loads additional documentation only when a documentation directory is supplied.
server.js dispatches execution through an MCP tool request.

Evidence against

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 53 file(s), 698 KB of source, external domains: api.influship.com, bun.sh, cursor.com, deno.land, docs.deno.com, docs.influship.com, endoflife.date, example.com, github.com, img.shields.io, jsr.io, npmjs.org, raw.githubusercontent.com, semver.org, vscode.stainless.com, www.github.com, www.npmjs.com, www.stainless.com, www.tiktok.com

Source & flagged code

5 flagged

instructions.jsView file

Lines 1-27javascript

1"use strict";

2// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.

3var __importDefault = (this && this.__importDefault) || function (mod) {

4 return (mod && mod.__esModule) ? mod : { "default": mod };

5};

6Object.defineProperty(exports, "__esModule", { value: true });

7exports.getInstructions = getInstructions;

8const promises_1 = __importDefault(require("fs/promises"));

9const logger_1 = require("./logger.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

instructions.jsView on unpkg · L7

10const INSTRUCTIONS_CACHE_TTL_MS = 15 * 60 * 1000; // 15 minutes

11const instructionsCache = new Map();

12async function getInstructions({ stainlessApiKey, customInstructionsPath, }) {

13 const now = Date.now();

14 const cacheKey = customInstructionsPath ?? stainlessApiKey ?? '';

15 const cached = instructionsCache.get(cacheKey);

16 if (cached && now - cached.fetchedAt <= INSTRUCTIONS_CACHE_TTL_MS) {

17 return cached.fetchedInstructions;

18 }

19 // Evict stale entries so the cache doesn't grow unboundedly.

20 for (const [key, entry] of instructionsCache) {

21 if (now - entry.fetchedAt > INSTRUCTIONS_CACHE_TTL_MS) {

22 instructionsCache.delete(key);

23 }

24 }

25 let fetchedInstructions;

26 if (customInstructionsPath) {

27 fetchedInstructions = await fetchLatestInstructionsFromFile(customInstructionsPath);

code-tool.jsView file

Lines 117-157javascript

117 isError: result.isError,

118 contentRows: result.content?.length ?? 0,

119 }, 'Got code tool execution result');

120 return result;

121 };

122 return

package.jsonView file

Lines 216-244json

216 "import": "./types.mjs",

217 "require": "./types.js"

218 },

219 "./types.js": {

220 "default": "./types.js"

221 },

222 "./types.mjs"

code-tool-worker.jsView file

•matchType = token_shingles matchedPackage = plumery-mcp@3.9.0 matchedPath = code-tool-worker.js matchedIdentity = npm:cGx1bWVyeS1tY3A:3.9.0 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

code-tool-worker.jsView on unpkg

local-docs-search.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = influship-api-mcp@0.22.0 matchedIdentity = npm:aW5mbHVzaGlwLWFwaS1tY3A:0.22.0 similarity = 0.945 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

local-docs-search.jsView on unpkg

Source & flagged code

5 flagged · loading source

instructions.jsView file

7exports.getInstructions = getInstructions; L8: const promises_1 = __importDefault(require("fs/promises")); L9: const logger_1 = require("./logger.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

instructions.jsView on unpkg · L7

code-tool.jsView file

137Source sends the broad process environment to a literal external destination. L137: // Check if deno is in PATH L138: const { execSync, spawn } = await Promise.resolve().then(() => __importStar(require('node:child_process'))); L139: try { ... L151: return (0, types_1.asErrorResult)('Deno is required for code execution but was not found. ' + L152: 'Install it from https://deno.land or run: npm install deno'); L153: } ... L177: spawnFunc(command, args, options) { L178: const bootstrapIndex = args.findIndex((arg) => arg.startsWith('data:text/typescript,')); L179: const socket = args[bootstrapIndex + 1]; ... L198: // with the upstream env vars taking precedence. L199: env: { ...process.env, ...reqContext.upstreamClientEnvs }, L200: },

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

code-tool.jsView on unpkg · L137

Findings

2 Critical2 High4 Medium4 Low

CriticalHardcoded Runtime Data Exfiltrationcode-tool.js

CriticalManifest Confusionpackage.json

HighKnown Malware Source Similaritycode-tool-worker.js

HighPrevious Version Dangerous Deltalocal-docs-search.js

MediumDynamic Requireinstructions.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to influship-api-mcp@0.22.1.

See all versions of influship-api-mcp for other recorded verdicts.

Review the evidence and your use of influship-api-mcp@0.22.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-07 01:47:51.137Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.