kogiqa-mcp@1.3.29: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

kogiqa-mcp@1.3.29: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node postInstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/main.jsView file

1(()=>{var r,t,n,a,o={1519:(r,t,n)=>{"use strict";var a=n(397),o=n(2572),s=n(1147),l=n(9443);function formatProdErrorMessage(r){var t="https://react.dev/errors/"+r;if(1<arguments.le...

Low

Eval

Package source references a known benign dynamic code generation pattern.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/main.jsView on unpkg · L1

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseSourceAndMetadata.worker.worker.jsView file

1(()=>{var e={785:(e,t,r)=>{"use strict";var s=r(397);Object.defineProperty(t,"__esModule",{value:!0}),t.codeFrameColumns=codeFrameColumns,t.default=function(e,t,r,i={}){if(!n){n=!0...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseSourceAndMetadata.worker.worker.jsView on unpkg · L1

kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQAView file

•path = kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQA kind = native_binary sizeBytes = 52832 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQAView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icnsView file

•path = kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icns kind = high_entropy_blob sizeBytes = 177427 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icnsView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseHookNames.chunk.jsView file

•path = kogiqa-extracted/kogiQA.[redacted].chunk.js kind = oversized_source_file sizeBytes = 2274031 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseHookNames.chunk.jsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 21-56json

21 },

22 "bugs": {

23 "url": "https://github.com/atagon-GmbH/kogiqa-mcp/issues"

24 },

25 "mcpName": "com.atagon/kogiqa-mcp",

26 "type": "module",

27 "main": "index.js",

28 "types": "./types/index.d.ts",

29 "homepage": "https://kogiqa.com",

30 "author": {

31 "name": "atagon GmbH"

32 },

33 "license": "MIT",

34 "engines": {

35 "node": ">=20.0"

36 },

37 "bin": {

38 "kogiqa-mcp": "index.js"

39 },

40 "scripts": {

41 "postinstall": "node postInstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L41

42 "inspect": "npx @modelcontextprotocol/inspector node index.js",

43 "inspect2": "CLIENT_PORT=5174 SERVER_PORT=5175 npx @modelcontextprotocol/inspector node index.js",

44 "publishNew": "npm run build:types && npm publish",

45 "build:types": "tsc -p tsconfig.json"

46 },

47 "dependencies": {

48 "@modelcontextprotocol/sdk": "^1.29.0",

49 "add-mcp": "^1.13.0",

50 "axios": "^1.18.1"

51 },

52 "devDependencies": {

53 "@types/node": "^26.0.1"

54 }

55}

56

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/main.jsView file

1(()=>{var r,t,n,a,o={1519:(r,t,n)=>{"use strict";var a=n(397),o=n(2572),s=n(1147),l=n(9443);function formatProdErrorMessage(r){var t="https://react.dev/errors/"+r;if(1<arguments.le...

Low

Eval

Package source references a known benign dynamic code generation pattern.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/main.jsView on unpkg · L1

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseSourceAndMetadata.worker.worker.jsView file

1(()=>{var e={785:(e,t,r)=>{"use strict";var s=r(397);Object.defineProperty(t,"__esModule",{value:!0}),t.codeFrameColumns=codeFrameColumns,t.default=function(e,t,r,i={}){if(!n){n=!0...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseSourceAndMetadata.worker.worker.jsView on unpkg · L1

kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQAView file

•path = kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQA kind = native_binary sizeBytes = 52832 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

kogiqa-extracted/kogiQA.app/Contents/MacOS/kogiQAView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icnsView file

•path = kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icns kind = high_entropy_blob sizeBytes = 177427 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

kogiqa-extracted/kogiQA.app/Contents/Resources/icon.icnsView on unpkg

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseHookNames.chunk.jsView file

•path = kogiqa-extracted/kogiQA.[redacted].chunk.js kind = oversized_source_file sizeBytes = 2274031 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

kogiqa-extracted/kogiQA.app/Contents/Resources/extensions/fmkadmapgofadopljbjfkapdkoienihi/build/parseHookNames.chunk.jsView on unpkg