mcp-scraper@0.90.7
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe inspected source supports explicit user-command AI-agent configuration mutation, but not an unconsented lifecycle attack. This is a guarded dangerous capability rather than confirmed malware.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the agent install command with the apply option for Claude.
Impact
The user-selected Claude Code environment can be configured to run this package as an MCP server.
Mechanism
The CLI invokes the Claude command-line client to change its MCP registration.
AI rationale
The inspected source supports explicit user-command AI-agent configuration mutation, but not an unconsented lifecycle attack. This is a guarded dangerous capability rather than confirmed malware.
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Package metadata exposes command-line entry points, including an installer command.
- The CLI provides an agent-install command for several AI coding clients.
- Its apply option can modify a Claude Code user-scope MCP registration.
- The CLI launches commands through a child-process spawn wrapper.
Evidence against
- No install lifecycle hook is declared in the inspected package metadata.
- The configuration change requires an explicit CLI apply option and an API key.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
13 flaggeddist/chunk-JHMI6HEO.jsView file
1import{c as be}from"./chunk-KJQXUZ4Y.js";import{b as T,l as ve}from"./chunk-2TZBO52D.js";import{a as _e,c as ke,d as X,e as Re,f as Se}from"./chunk-WO3N5FH2.js";function xe(e){retu...
L2: `);return["<section>",`<h2>${I(e.title)}</h2>`,'<div class="table-wrap"><table>',`<thead><tr>${e.columns.map(n=>`<th>${I(n)}</th>`).join("")}</tr></thead>`,`<tbody>${t||`<tr><td co...
High
Child Process
Package source references child process execution.
dist/chunk-JHMI6HEO.jsView on unpkg · L1dist/server-LYWW6XYE.jsView file
1import{a as Fh,b as kE,d as IE,e as Yi,f as Wr,g as Jh,h as fA,k as tp,m as np,n as hA,o as yA,p as bA}from"./chunk-TBTA7VVZ.js";import{A as cA,B as lA,D as dA,E as ep,G as uA,I as...
L2: <span class="si-heading">Quick check \u2014 what did you just read?</span>
...
L1105: </body>
L1106: </html>`}import n5 from"satori";import{Resvg as r5}from"@resvg/resvg-js";import{readFileSync as Zy}from"fs";import{join as Np}from"path";var ST=Np(process.cwd(),"public/fonts/gt-fl...
L1107: ${CT(t)}`;for(let i of l5)if(i.pattern.test(r))return{detected:!0,reason:i.reason};return{detected:!1,reason:null}}function PT(e){let t=e.status??null;if(t==null||t<200||t>=300)ret...
L1108: ${e.html??""}`.slice(0,25e4);if(!PT(e)){for(let r of d5)if(r.pattern.test(n))return{detected:!0,reason:r.reason}}return{detec
Findings
4 Critical9 High3 Medium5 Low
CriticalSame File Env Network Executiondist/index.cjs
CriticalCredential Exfiltrationdist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
CriticalPrevious Version Dangerous Deltadist/bin/mcp-scraper-cli.js
HighChild Processdist/chunk-JHMI6HEO.js
HighShell
HighBrowser Session Account Hijackdist/server-LYWW6XYE.js
HighCredential Redirect Persistencedist/server-LYWW6XYE.js
HighCommand Output Exfiltrationdist/chunk-M5QHXNFZ.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
Affected versions and remediation
This report applies to mcp-scraper@0.90.7.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.90.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.