mcp-scraper@0.95.2
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package contains an explicit-user-command AI-agent configuration capability. It is not an automatic or covert attack, so a warning is appropriate rather than a block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the agent install command with --apply for Claude.
Impact
This explicitly requested action changes an AI-agent client configuration and can grant the package MCP capabilities.
Mechanism
The CLI calls the Claude command to replace the user-scope mcp-scraper MCP registration.
AI rationale
The package contains an explicit-user-command AI-agent configuration capability. It is not an automatic or covert attack, so a warning is appropriate rather than a block.
Evidence
dist/bin/mcp-scraper-cli.js
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The CLI provides agent-install configuration for several AI-agent hosts.
- Its --apply option explicitly upserts a user-scope Claude Code MCP server and requires both the flag and a supplied API key.
- The apply path invokes the Claude CLI to remove and add the MCP registration.
Evidence against
- package.json has no install lifecycle hook.
- The configuration change is gated behind an explicit CLI command and --apply flag.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
13 flaggeddist/server-QVEKDIDQ.jsView file
1629WHERE id = ?`,args:[r,t]})}async logSiteAuditPhaseComplete(t,r,n){await this.db.execute({sql:`INSERT OR IGNORE INTO site_audit_phase_log (job_id, phase, output_summary, completed_a...
L1630: VALUES (?, ?, ?, datetime('now'))`,args:[t,r,JSON.stringify(n)]}).catch(i=>{console.warn("[site-audit-repository] logSiteAuditPhaseComplete failed:",i instanceof Error?i.message:St...
L1631: `)+`
High
Child Process
Package source references child process execution.
dist/server-QVEKDIDQ.jsView on unpkg · L16291import{a as bk,b as ky,c as wk,d as Cp,e as _k,f as vk,g as Ci,h as fo,i as zp,j as ai,k as Ee,l as Vp,m as eb,n as Ti,o as ho,p as Jp,q as Yp,s as mP}from"./chunk-7XDBGQDY.js";imp...
L2: <span class="si-heading">Quick check \u2014 what did you just read?</span>
...
L207: })();</script>
L208: </div>`}]}];var tW="https://hyros-attribution-crm.vercel.app/api/track/sdk?token=[redacted]",yo=`<script src="${tW}" async></s...
L209: "@context": "https://schema.org",
...
L1105: </body>
L1106: </html>`}import fW from"satori";import{Resvg as hW}from"@resvg/resvg-js";import{readFileSync as Ub}from"fs";import{join as gm}from"path";var hP=gm(process.cwd(),"public/fonts/gt-fl...
L1107: ${xP(t)}`;for(let i of xW)if(i.pattern.test(n))return{detected:!0,reason:i.reason};return{detected:!1,reason:null}}
High
Browser Session Account Hijack
Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.
dist/server-QVEKDIDQ.jsView on unpkg · L1Findings
4 Critical9 High3 Medium5 Low
CriticalSame File Env Network Executiondist/index.cjs
CriticalCredential Exfiltrationdist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/server-QVEKDIDQ.js
HighShell
HighBrowser Session Account Hijackdist/server-QVEKDIDQ.js
HighCredential Redirect Persistencedist/server-QVEKDIDQ.js
HighCommand Output Exfiltrationdist/server-QVEKDIDQ.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
Affected versions and remediation
This report applies to mcp-scraper@0.95.2.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.95.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.