mcp-scraper@0.29.0

⚠ Under review

Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.

MCP server for MCP Scraper web intelligence tools

Static Scan Results

scanned 4mo ago · by rust-scanner

Static analysis flagged 13 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsObfuscatedUrlStrings

Manifest

NoLicense

scanned 31 file(s), 3.55 MB of source, external domains: adstransparency.google.com, anthropic.com, api.deepinfra.com, api64.ipify.org, blog.modelcontextprotocol.io, cdn.resend.com, chatgpt.com, chatgptguide.ai, chromewebstore.google.com, claude.ai, example.com, hyros-attribution-crm.vercel.app, instagram.com, ipapi.co, ipwho.is, mcp-scraper-scheduler.vercel.app, mcpscraper.dev, medium.com, memory.mcpscraper.dev, modelcontextprotocol.io, openrouter.ai, registry.npmjs.org, resend.com, schema.org, steenshoney.com, suprmind.ai, techcrunch.com, thorbit.ai, www.facebook.com, www.g2.com, www.google.com, www.googleapis.com, www.instagram.com, www.mcpscraper.dev, www.trustpilot.com, www.xmlvalidation.com, www.youtube.com, www2.census.gov, yourdomain.com, youtube.com

Oversized source lightweight scan

dist/bin/api-server.cjs2.39 MB file, sampled 256 KB

FilesystemNetworkEnvironmentVarsHighEntropyStringsUrlStringschatgptguide.ai

Source & flagged code

4 flagged

dist/server-N4QMTJPS.jsView file

10855contains invisible/control Unicode U+200B (zero width space) const bodyText = rawBodyText.replace(/<U+200B>/g, " ").replace(/\s+/g, " ");

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/server-N4QMTJPS.jsView on unpkg · L10855

•Trigger-reachable chain: manifest.bin -> dist/bin/api-server.js -> dist/server-N4QMTJPS.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/server-N4QMTJPS.jsView on unpkg

21757patternName = generic_password severity = medium line = 21757 matchedText = url.pass...D]";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/server-N4QMTJPS.jsView on unpkg · L21757

Findings

2 Critical4 Medium7 Low

CriticalTrojan Source Unicodedist/server-N4QMTJPS.js

CriticalTrigger Reachable Dangerous Capabilitydist/server-N4QMTJPS.js

MediumSecret Patterndist/server-N4QMTJPS.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/server-N4QMTJPS.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to mcp-scraper@0.29.0.

See all versions of mcp-scraper for other recorded verdicts.

Review the evidence and your use of mcp-scraper@0.29.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-07-20 22:29:02.738Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / mcp-scraper / 0.29.0

mcp-scraper@0.29.0

⚠ Under review

Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.

MCP server for MCP Scraper web intelligence tools

Static Scan Results

scanned 4mo ago · by rust-scanner

Static analysis flagged 13 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsObfuscatedUrlStrings

Manifest

NoLicense

Oversized source lightweight scan

dist/bin/api-server.cjs2.39 MB file, sampled 256 KB

FilesystemNetworkEnvironmentVarsHighEntropyStringsUrlStringschatgptguide.ai

Source & flagged code

4 flagged

dist/server-N4QMTJPS.jsView file

10855contains invisible/control Unicode U+200B (zero width space) const bodyText = rawBodyText.replace(/<U+200B>/g, " ").replace(/\s+/g, " ");

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/server-N4QMTJPS.jsView on unpkg · L10855

•Trigger-reachable chain: manifest.bin -> dist/bin/api-server.js -> dist/server-N4QMTJPS.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/server-N4QMTJPS.jsView on unpkg

21757patternName = generic_password severity = medium line = 21757 matchedText = url.pass...D]";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/server-N4QMTJPS.jsView on unpkg · L21757

Findings

2 Critical4 Medium7 Low

CriticalTrojan Source Unicodedist/server-N4QMTJPS.js

CriticalTrigger Reachable Dangerous Capabilitydist/server-N4QMTJPS.js

MediumSecret Patterndist/server-N4QMTJPS.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/server-N4QMTJPS.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to mcp-scraper@0.29.0.

See all versions of mcp-scraper for other recorded verdicts.

Review the evidence and your use of mcp-scraper@0.29.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-07-20 22:29:02.738Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.