mcp-scraper@0.90.6
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe explicit user-scope AI-agent configuration mutation warrants a warning under the policy. Static inspection found no automatic lifecycle activation or concrete malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the agent-install command with the --apply option for Claude Code.
Impact
This changes an AI-agent control configuration and enables the package in that agent context; no install-time mutation was found.
Mechanism
The CLI calls the Claude command-line interface to add a user-scope MCP entry that launches the package through npx.
AI rationale
The explicit user-scope AI-agent configuration mutation warrants a warning under the policy. Static inspection found no automatic lifecycle activation or concrete malicious behavior.
Evidence
dist/bin/mcp-scraper-cli.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The manifest exposes command-line entry points and no lifecycle script was present.
- The agent-install command can generate or apply configuration for several AI-agent hosts.
- The apply path explicitly upserts a user-scope Claude Code MCP server.
- The command constructed for that server runs this package through npx.
Evidence against
- The configuration mutation is gated by an explicit agent-install command and the --apply option.
- The inspected manifest contains no preinstall, install, or postinstall hook.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
13 flaggeddist/chunk-JHMI6HEO.jsView file
1import{c as be}from"./chunk-KJQXUZ4Y.js";import{b as T,l as ve}from"./chunk-2TZBO52D.js";import{a as _e,c as ke,d as X,e as Re,f as Se}from"./chunk-WO3N5FH2.js";function xe(e){retu...
L2: `);return["<section>",`<h2>${I(e.title)}</h2>`,'<div class="table-wrap"><table>',`<thead><tr>${e.columns.map(n=>`<th>${I(n)}</th>`).join("")}</tr></thead>`,`<tbody>${t||`<tr><td co...
High
Child Process
Package source references child process execution.
dist/chunk-JHMI6HEO.jsView on unpkg · L1dist/server-TQJ6Z3ZF.jsView file
1import{a as jh,b as xE,d as SE,e as Xi,f as Wr,g as Gh,h as uA,k as ep,m as tp,n as pA,o as mA}from"./chunk-XXK5PLRB.js";import{A as iA,B as oA,D as sA,E as Qu,G as aA,I as cA,J as...
L2: <span class="si-heading">Quick check \u2014 what did you just read?</span>
...
L1105: </body>
L1106: </html>`}import zH from"satori";import{Resvg as KH}from"@resvg/resvg-js";import{readFileSync as Yy}from"fs";import{join as Pp}from"path";var yT=Pp(process.cwd(),"public/fonts/gt-fl...
L1107: ${ST(t)}`;for(let i of ZH)if(i.pattern.test(r))return{detected:!0,reason:i.reason};return{detected:!1,reason:null}}function AT(e){let t=e.status??null;if(t==null||t<200||t>=300)ret...
L1108: ${e.html??""}`.slice(0,25e4);if(!AT(e)){for(let r of QH)if(r.pattern.test(n))return{detected:!0,reason:r.reason}}return{detec
Findings
4 Critical9 High3 Medium5 Low
CriticalSame File Env Network Executiondist/index.cjs
CriticalCredential Exfiltrationdist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
CriticalPrevious Version Dangerous Deltadist/bin/mcp-scraper-cli.js
HighChild Processdist/chunk-JHMI6HEO.js
HighShell
HighBrowser Session Account Hijackdist/server-TQJ6Z3ZF.js
HighCredential Redirect Persistencedist/server-TQJ6Z3ZF.js
HighCommand Output Exfiltrationdist/server-TQJ6Z3ZF.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
Affected versions and remediation
This report applies to mcp-scraper@0.90.6.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.90.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.