registry / local-mcp / 3.0.325

local-mcp@3.0.325

Let ChatGPT, Claude, Cursor & any MCP client actually use your Mac — read & reply to email, manage your calendar, text over iMessage, find files, work with Teams, Slack & Office. On your Mac, no API keys, free.

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 4 file(s), 87.0 KB of source, external domains: download.local-mcp.com, local-mcp.com, office-mcp-production.up.railway.app

Source & flagged code

7 flagged

package.jsonView file

Lines 1-30json

2 "name": "local-mcp",

3 "version": "3.0.325",

4 "description": "Let ChatGPT, Claude, Cursor & any MCP client actually use your Mac — read & reply to email, manage your calendar, text over iMessage, find files, work with Teams, Slack & Office. On your Mac, no API keys, free.",

5 "main": "index.js",

6 "bin": {

7 "local-mcp": "index.js"

8 },

9 "scripts": {

10 "postinstall": "node postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L10

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L10

11 },

12 "files": [

13 "index.js",

14 "download.js",

15 "setup.js",

16 "postinstall.js",

17 "README.md"

18 ],

19 "engines": {

20 "node": ">=18"

21 },

22 "os": [

23 "darwin"

24 ],

25 "keywords": [

26 "mcp",

27 "model-context-protocol",

28 "mcp-server",

29 "claude",

30 "claude-desktop",

download.jsView file

Lines 1-32javascript

1'use strict'

2/**

3 * download.js — descarga y cachea el binario standalone de LMCP desde R2.

4 * El binario fue compilado con PyInstaller — no requiere Python instalado.

5 * Cache: ~/.local/share/local-mcp/bin/{version}/

6 */

8const https = require('https')

9const http =

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

download.jsView file

12const os = require('os') L13: const { execFileSync, execSync } = require('child_process') L14:

High

Child Process

Package source references child process execution.

download.jsView on unpkg · L12

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

download.jsView on unpkg · L7

345if (fs.existsSync(systemTrayApp) && trayApp !== systemTrayApp) { L346: try { execFileSync('rm', ['-rf', systemTrayApp], { stdio: 'pipe' }) } catch { /* ignorar */ } L347: } ... L358: L359: const url = `https://download.local-mcp.com/local-mcp-tray-${version}-darwin-universal.tar.gz` L360: process.stderr.write(`\nDescargando tray v${version}...\n`) L361:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

download.jsView on unpkg · L345

7L8: const https = require('https') L9: const http = require('http') ... L12: const os = require('os') L13: const { execFileSync, execSync } = require('child_process') L14: ... L17: function extractTar(tarPath, destDir) { L18: const tarBin = process.platform === 'win32' L19: ? path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'tar.exe') L20: : 'tar' ... L30: const CACHE_DIR = process.platform === 'win32' L31: ? path.join(process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local'), 'local-mcp', 'bin')

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

download.jsView on unpkg · L7

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

download.jsView on unpkg · L7

Findings

6 High5 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdownload.js

HighShell

HighSame File Env Network Executiondownload.js

HighCommand Output Exfiltrationdownload.js

HighSandbox Evasion Gated Capabilitydownload.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedownload.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

7 flagged

package.jsonView file

Lines 1-30json

2 "name": "local-mcp",

3 "version": "3.0.325",

5 "main": "index.js",

6 "bin": {

7 "local-mcp": "index.js"

8 },

9 "scripts": {

10 "postinstall": "node postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L10

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L10

11 },

12 "files": [

13 "index.js",

14 "download.js",

15 "setup.js",

16 "postinstall.js",

17 "README.md"

18 ],

19 "engines": {

20 "node": ">=18"

21 },

22 "os": [

23 "darwin"

24 ],

25 "keywords": [

26 "mcp",

27 "model-context-protocol",

28 "mcp-server",

29 "claude",

30 "claude-desktop",

download.jsView file

Lines 1-32javascript

1'use strict'

2/**

3 * download.js — descarga y cachea el binario standalone de LMCP desde R2.

4 * El binario fue compilado con PyInstaller — no requiere Python instalado.

5 * Cache: ~/.local/share/local-mcp/bin/{version}/

6 */

8const https = require('https')

9const http =

Lines 325-365javascript

325 return _ensureTrayWindows()

326 }

327

328 // Respect explicit uninstall — don't resurrect tray if user ran `uninstall`

329 const uninstalledMarker = path.join(CACHE_DIR, '..', '.uninstalled')

330 if (fs.existsSync(uninstalledMarker)) return null

331

332 const info = await getLatestBinary()

333 const version = info.version

334 const trayApp = TRAY_APP

335 const verFile = path.join(TRAY_DIR, '.version')

336

337 // Migrar instalación vieja de ~/.local/share si existe

338 const oldTrayApp = path.join(TRAY_DIR, 'LocalMCPTray.app')

339 if (fs.existsSync(oldTrayApp)) {

340 try { execFileSync('rm', ['-rf', oldTrayApp], { stdio: 'pipe' }) } catch { /* ignorar */ }

341 }

342

343 // Migrar instalación vieja de /Applications → ~/Applications (evita diálogo App Management)

344 const systemTrayApp = '/Applications/LocalMCPTray.app'

345 if (fs.existsSync(systemTrayApp) && trayApp !== systemTrayApp) {

346 try { execFileSync('rm', ['-rf', systemTrayApp], { stdio: 'pipe' }) } catch { /* ignorar */ }

347 }

348

349 // Ya instalado y actualizado

350 if (fs.existsSync(trayApp) && fs.existsSync(verFile)) {

351 if (fs.readFileSync(verFile, 'utf8').trim() === version) return trayApp

352 }

353

354 // In an active MCP session (non-TTY) the tray is running and self-updates via UpdateManager.

355 // Downloading a new tray bundle and rm-rf'ing the old one mid-session kills the Unix socket

356 // that local-mcp-server uses, crashing the session. Skip the update; it'll apply next login.

357 if (!process.stdin.isTTY && fs.existsSync(trayApp)) return trayApp

358

359 const url = `https://download.local-mcp.com/local-mcp-tray-${version}-darwin-universal.tar.gz`

360 process.stderr.write(`\nDescargando tray v${version}...\n`)

361

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

download.jsView on unpkg · L345

362 fs.mkdirSync(TRAY_DIR, { recursive: true })

363 const tarPath = path.join(TRAY_DIR, `tray-${version}.tar.gz`)

364

365 // Descargar ANTES de borrar el viejo — si la descarga falla, el tray actual sigue intacto