registry / mcp-scraper / 0.90.0
mcp-scraper@0.90.0
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 1mo ago · by lpm-firewall-aiStatic inspection found no lifecycle scripts, self-dependency, covert credential flow, or destructive behavior. The bundled CLI includes user-invoked MCP setup functionality, which alone is package-aligned.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
No automatic install or import-time trigger was identified.
Impact
No confirmed malicious impact was established.
Mechanism
The inspected CLI constructs a scoped MCP command from supplied configuration; no confirmed covert execution or data export was found.
AI rationale
Static inspection found no lifecycle scripts, self-dependency, covert credential flow, or destructive behavior. The bundled CLI includes user-invoked MCP setup functionality, which alone is package-aligned.
Decision evidence
public snapshotAI called this Clean at 85.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares library and CLI entrypoints and contains no lifecycle script section.
- The CLI builds an MCP registration command only when its agent-install functionality is invoked.
- The main bundle configures its database from local or caller-supplied environment settings.
- The server bundle contains a package-site analytics asset reference, not an install-time network trigger.
- The utility chunk only normalizes text into a restricted slug form.
- The shared request chunk recognizes cancelled fetch errors.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
13 flaggeddist/chunk-JHMI6HEO.jsView file
1import{c as be}from"./chunk-KJQXUZ4Y.js";import{b as T,l as ve}from"./chunk-2TZBO52D.js";import{a as _e,c as ke,d as X,e as Re,f as Se}from"./chunk-WO3N5FH2.js";function xe(e){retu...
L2: `);return["<section>",`<h2>${I(e.title)}</h2>`,'<div class="table-wrap"><table>',`<thead><tr>${e.columns.map(n=>`<th>${I(n)}</th>`).join("")}</tr></thead>`,`<tbody>${t||`<tr><td co...
High
Child Process
Package source references child process execution.
dist/chunk-JHMI6HEO.jsView on unpkg · L1dist/chunk-HJ7OGU2J.jsView file
1import{a as Zt,s as tn}from"./chunk-WTOKMWDS.js";import{T as cn,a as de,b as Ne,c as yt,d as an,e as on,q as f,r as v,sa as G,ta as Ce,v as U,w as J}from"./chunk-HR2A2WTL.js";impor...
L2: `).find(i=>i.startsWith("data:")),n=t?t.slice(5).trim():e;return JSON.parse(n)}function gt(e){return e?(process.env.MEMORY_OPERATOR_IDENTITIES??"").split(",").map(n=>n.trim().toLow...
L3: INSERT OR IGNORE INTO connected_account_charge_transfers (
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/chunk-HJ7OGU2J.jsView on unpkg · L1Findings
4 Critical9 High3 Medium5 Low
CriticalSame File Env Network Executiondist/index.cjs
CriticalCredential Exfiltrationdist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
CriticalPrevious Version Dangerous Deltadist/bin/mcp-scraper-cli.js
HighChild Processdist/chunk-JHMI6HEO.js
HighShell
HighBrowser Session Account Hijackdist/server-TI7YYGK5.js
HighCredential Redirect Persistencedist/server-TI7YYGK5.js
HighCommand Output Exfiltrationdist/chunk-M5QHXNFZ.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
Affected versions and remediation
This report applies to mcp-scraper@0.90.0.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.90.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.