kogiqa-mcp@1.3.28: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

kogiqa-mcp@1.3.28: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node postInstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/main.jsView file

1(()=>{var r,t,n,a,o={1519:(r,t,n)=>{"use strict";var a=n(397),o=n(2572),s=n(1147),l=n(9443);function formatProdErrorMessage(r){var t="https://react.dev/errors/"+r;if(1<arguments.le...

Low

Eval

Package source references a known benign dynamic code generation pattern.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/main.jsView on unpkg · L1

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseSourceAndMetadata.worker.worker.jsView file

1(()=>{var e={785:(e,t,r)=>{"use strict";var s=r(397);Object.defineProperty(t,"__esModule",{value:!0}),t.codeFrameColumns=codeFrameColumns,t.default=function(e,t,r,i={}){if(!n){n=!0...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseSourceAndMetadata.worker.worker.jsView on unpkg · L1

kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQAView file

•path = kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQA kind = native_binary sizeBytes = 52832 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQAView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icnsView file

•path = kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icns kind = high_entropy_blob sizeBytes = 177427 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icnsView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseHookNames.chunk.jsView file

•path = kogiqa-extracted/kogiQA.[redacted].chunk.js kind = oversized_source_file sizeBytes = 2274031 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseHookNames.chunk.jsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

•scripts.postinstall = node postInstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/main.jsView file

1(()=>{var r,t,n,a,o={1519:(r,t,n)=>{"use strict";var a=n(397),o=n(2572),s=n(1147),l=n(9443);function formatProdErrorMessage(r){var t="https://react.dev/errors/"+r;if(1<arguments.le...

Low

Eval

Package source references a known benign dynamic code generation pattern.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/main.jsView on unpkg · L1

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseSourceAndMetadata.worker.worker.jsView file

1(()=>{var e={785:(e,t,r)=>{"use strict";var s=r(397);Object.defineProperty(t,"__esModule",{value:!0}),t.codeFrameColumns=codeFrameColumns,t.default=function(e,t,r,i={}){if(!n){n=!0...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseSourceAndMetadata.worker.worker.jsView on unpkg · L1

kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQAView file

•path = kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQA kind = native_binary sizeBytes = 52832 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQAView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icnsView file

•path = kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icns kind = high_entropy_blob sizeBytes = 177427 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icnsView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseHookNames.chunk.jsView file

•path = kogiqa-extracted/kogiQA.[redacted].chunk.js kind = oversized_source_file sizeBytes = 2274031 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseHookNames.chunk.jsView on unpkg