local-mcp@3.0.331: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

local-mcp@3.0.331: Suspicious npm security report (Warn) | LPM Firewall

download.jsView file

12const os = require('os') L13: const { execFileSync, execSync } = require('child_process') L14:

High

Child Process

Package source references child process execution.

download.jsView on unpkg · L12

7L8: const https = require('https') L9: const http = require('http') ... L12: const os = require('os') L13: const { execFileSync, execSync } = require('child_process') L14: ... L18: const tarBin = process.platform === 'win32' L19: ? path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'tar.exe') L20: : 'tar'

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

download.jsView on unpkg · L7

345if (fs.existsSync(systemTrayApp) && trayApp !== systemTrayApp) { L346: try { execFileSync('rm', ['-rf', systemTrayApp], { stdio: 'pipe' }) } catch { /* ignorar */ } L347: } ... L358: L359: const url = `https://download.local-mcp.com/local-mcp-tray-${version}-darwin-universal.tar.gz` L360: process.stderr.write(`\nDescargando tray v${version}...\n`) L361:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

download.jsView on unpkg · L345

7L8: const https = require('https') L9: const http = require('http') ... L12: const os = require('os') L13: const { execFileSync, execSync } = require('child_process') L14: ... L17: function extractTar(tarPath, destDir) { L18: const tarBin = process.platform === 'win32' L19: ? path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'tar.exe') L20: : 'tar' ... L30: const CACHE_DIR = process.platform === 'win32' L31: ? path.join(process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local'), 'local-mcp', 'bin')

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

download.jsView on unpkg · L7

7L8: const https = require('https') L9: const http = require('http') ... L12: const os = require('os') L13: const { execFileSync, execSync } = require('child_process') L14: ... L17: function extractTar(tarPath, destDir) { L18: const tarBin = process.platform === 'win32' L19: ? path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'tar.exe') L20: : 'tar' ... L30: const CACHE_DIR = process.platform === 'win32' L31: ? path.join(process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local'), 'local-mcp', 'bin')

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

download.jsView on unpkg · L7

Lines 325-365javascript

325 return _ensureTrayWindows()

326 }

327

328 // Respect explicit uninstall — don't resurrect tray if user ran `uninstall`

329 const uninstalledMarker = path.join(CACHE_DIR, '..', '.uninstalled')

330 if (fs.existsSync(uninstalledMarker)) return null

331

332 const info = await getLatestBinary()

333 const version = info.version

334 const trayApp = TRAY_APP

335 const verFile = path.join(TRAY_DIR, '.version')

336

337 // Migrar instalación vieja de ~/.local/share si existe

338 const oldTrayApp = path.join(TRAY_DIR, 'LocalMCPTray.app')

339 if (fs.existsSync(oldTrayApp)) {

340 try { execFileSync('rm', ['-rf', oldTrayApp], { stdio: 'pipe' }) } catch { /* ignorar */ }

341 }

342

343 // Migrar instalación vieja de /Applications → ~/Applications (evita diálogo App Management)

344 const systemTrayApp = '/Applications/LocalMCPTray.app'

345 if (fs.existsSync(systemTrayApp) && trayApp !== systemTrayApp) {

346 try { execFileSync('rm', ['-rf', systemTrayApp], { stdio: 'pipe' }) } catch { /* ignorar */ }

347 }

348

349 // Ya instalado y actualizado

350 if (fs.existsSync(trayApp) && fs.existsSync(verFile)) {

351 if (fs.readFileSync(verFile, 'utf8').trim() === version) return trayApp

352 }

353

354 // In an active MCP session (non-TTY) the tray is running and self-updates via UpdateManager.

355 // Downloading a new tray bundle and rm-rf'ing the old one mid-session kills the Unix socket

356 // that local-mcp-server uses, crashing the session. Skip the update; it'll apply next login.

357 if (!process.stdin.isTTY && fs.existsSync(trayApp)) return trayApp

358

359 const url = `https://download.local-mcp.com/local-mcp-tray-${version}-darwin-universal.tar.gz`

360 process.stderr.write(`\nDescargando tray v${version}...\n`)

361

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

download.jsView on unpkg · L345

362 fs.mkdirSync(TRAY_DIR, { recursive: true })

363 const tarPath = path.join(TRAY_DIR, `tray-${version}.tar.gz`)

364

365 // Descargar ANTES de borrar el viejo — si la descarga falla, el tray actual sigue intacto