integram-mcp@0.7.103

MCP server for Integram — connect AI assistants to your workspace via Model Context Protocol

AI Security Review

scanned 4d ago · by lpm-firewall-ai

Source inspection found no install hook or concrete attack behavior. The scanner's runtime install signal resolves to a Git-only self-update path, while the scheduled network request checks package version metadata.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running the executable starts the update check and Git updater.

Impact

The inspected behavior does not establish credential disclosure, unrequested account actions, or an install-time attack.

Mechanism

The update check reads or refreshes a package-specific cache and requests the package's latest tag. The Git updater proceeds only after confirming its directory is a Git repository.

AI rationale

Evidence

package.jsonindex.js

Network endpoints1

registry.npmjs.org

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json maps the executable to index.js and defines only test and prepublishOnly scripts; neither is an install hook.
The optional update check uses a package-specific temporary cache and requests the package's latest tag from the npm registry.
The flagged runtime locations refer to the update cache, scheduled update check, and ordinary startup error handling.
The git updater first checks that its directory is a Git repository; it pulls that repository and runs npm install only after detecting a change.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 270 KB of source, external domains: api.example.com, registry.npmjs.org, www.npmjs.com

Source & flagged code

3 flagged

index.jsView file

Lines 3082-3138javascript

3082 rememberActivation();

3083 workspace = slug;

3084

3085 // Загрузить инструменты целевого воркспейса: ядро + восстановленная

3086 // из памяти активация (инцидент 05.09.2026 — см. блок у activationMemory).

3087 const { tools, restored } = await loadWorkspaceTools(slug);

3088

3089 log(`Switched to workspace "${slug}", ${activeTools.size} tools loaded (${restored} restored from memory)`);

3090

3091 return {

3092 content: [{ type: 'text', text: `Switched to workspace "${slug}". Loaded ${tools.length} tools (${activeTools.size} active${restored ? `, ${restored} restored from previous activation` : ', core only'}). Use search_tools to activate more.` }],

3093 };

3094 } catch (err) {

3095 return { content: [{ type: 'text', text: `Error switching workspace: ${err.message}` }], isError: true };

3096 }

3097}

3098

3099// ─── Bootstrap ───────────────────────────────────────────────────────────────

3100

3101// ─── Auto-update from git ────────────────────────────────────────────────────

3102

3103import { execSync } from 'child_process';

3104import { realpathSync } from 'fs';

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L3102

3105import { dirname } from 'path';

3106import { fileURLToPath } from 'url';

3107

3108const __dirname = dirname(fileURLToPath(import.meta.url));

3109const AUTO_UPDATE_INTERVAL = 60 * 60 * 1000; // check every hour

3110

3111function tryAutoUpdate() {

3112 try {

3113 execSync('git rev-parse --git-dir', { cwd: __dirname, stdio: 'ignore' });

3114 const before = execSync('git rev-parse HEAD', { cwd: __dirname, encoding: 'utf8' }).trim();

3115 execSync('git pull --ff-only', { cwd: __dirname, stdio: 'ignore', timeout: 15000 });

3116 const after = execSync('git rev-parse HEAD', { cwd: __dirname, encoding: 'utf8' }).trim();

3117 if (before !== after) {

3118 log(`Updated ${before.slice(0, 7)} → ${after.slice(0, 7)}, restarting...`);

3119 try { execSync('npm install --omit=dev', { cwd: __dirname, stdio: 'ignore', timeout: 30000 }); } catch {}

3120 // Allow pending responses to drain before exit

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L3118

3121 log('Shutting down gracefully...');

3122 setTimeout(() => process.exit(0), 2000);

3123 }

3124 } catch { /* not a git repo or offline — skip */ }

3125}

3126

3127async function main() {

3128 tryAutoUpdate();

3129 setInterval(tryAutoUpdate, AUTO_UPDATE_INTERVAL);

3130

3131 // Не ждём: запуск сервера не должен зависеть от доступности реестра npm.

3132 checkForUpdate();

3133 setInterval(checkForUpdate, UPDATE_CHECK_INTERVAL_MS).unref();

3134

3135 log(`integram-mcp ${PKG.version}`);

3136 log(`Connecting to ${BASE_URL}, workspace "${workspace || '(not set)'}"`);

3137

3138 // 1. Login

•matchType = previous_version_dangerous_delta matchedPackage = integram-mcp@0.7.99 matchedIdentity = npm:aW50ZWdyYW0tbWNw:0.7.99 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg

Source & flagged code

3 flagged · loading source

index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg

3102L3103: import { execSync } from 'child_process'; L3104: import { realpathSync } from 'fs';

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L3102

3118log(`Updated ${before.slice(0, 7)} → ${after.slice(0, 7)}, restarting...`); L3119: try { execSync('npm install --omit=dev', { cwd: __dirname, stdio: 'ignore', timeout: 30000 }); } catch {} L3120: // Allow pending responses to drain before exit

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L3118

Findings

1 Critical3 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltaindex.js

HighChild Processindex.js

HighShell

HighRuntime Package Installindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to integram-mcp@0.7.103.

See all versions of integram-mcp for other recorded verdicts.

Review the evidence and your use of integram-mcp@0.7.103 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-19 10:08:56.504Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.