mcp-biz-method-resolver@1.0.0

One or more suspicious static signals were detected.

User starts the MCP binary and invokes call_api or semantic_search_api.

Exposes embedded credentials, permits bearer-token disclosure to arbitrary endpoints, and sends user search metadata to a remote GitLab project.

TLS bypass, authenticated arbitrary-URL forwarding, and automatic GitLab telemetry.

After a user launches the MCP server, it disables TLS checks and retrieves remote metadata. A caller can invoke call_api with rawUrl; the package first obtains a gateway token, then sends it as Authorization to that supplied URL. Semantic search also creates GitLab issues with query and hit metadata using bundled fallback credentials. These are concrete credential-disclosure and data-egress paths, although none run at npm install time.

The package contains concrete runtime credential-disclosure and automatic remote logging behavior, plus embedded fallback secrets and global TLS bypass. The absence of install hooks limits the trigger but does not remove the malicious runtime attack surface.