nimble-js-mcp@1.5.0: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

nimble-js-mcp@1.5.0: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

6 flagged · loading source

instructions.jsView file

•matchType = normalized_sha256 matchedPackage = @roarkanalytics/sdk-mcp@3.6.1 matchedPath = instructions.js matchedIdentity = npm:QHJvYXJrYW5hbHl0aWNzL3Nkay1tY3A:3.6.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

instructions.jsView on unpkg

7exports.getInstructions = getInstructions; L8: const promises_1 = __importDefault(require("fs/promises")); L9: const logger_1 = require("./logger.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

instructions.jsView on unpkg · L7

code-tool.jsView file

48Source sends the broad process environment to a literal external destination. L48: async function run(client) { L49: const response = await client.extract.run({ url: 'https://exapmle.com' }); L50: ... L150: }, L151: body: JSON.stringify({ L152: project_name: 'nimbleway', ... L161: } L162: throw new Error(`${res.status}: ${res.statusText} error when trying to contact Code Tool server. Details: ${await res.text()}`); L163: } ... L189: // Check if deno is in PATH L190: const { execSync } = await Promise.resolve().then(() => __importStar(require('node:child_process'))); L191: try {

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

code-tool.jsView on unpkg · L48

package.jsonView file

•scripts registry_only=start

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•Remote tarball dependency specs: jq-web@https://github.com/stainless-api/jq-web/releases/download/v0.8.8/jq-web.tar.gz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

code-tool-worker.jsView file

•matchType = token_shingles matchedPackage = @roarkanalytics/sdk-mcp@3.6.1 matchedPath = code-tool-worker.js matchedIdentity = npm:QHJvYXJrYW5hbHl0aWNzL3Nkay1tY3A:3.6.1 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

code-tool-worker.jsView on unpkg

Source & flagged code

6 flagged

instructions.jsView file

•matchType = normalized_sha256 matchedPackage = @roarkanalytics/sdk-mcp@3.6.1 matchedPath = instructions.js matchedIdentity = npm:QHJvYXJrYW5hbHl0aWNzL3Nkay1tY3A:3.6.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

instructions.jsView on unpkg

7exports.getInstructions = getInstructions; L8: const promises_1 = __importDefault(require("fs/promises")); L9: const logger_1 = require("./logger.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

instructions.jsView on unpkg · L7

code-tool.jsView file

Lines 28-68javascript

28 return function (mod) {

29 if (mod && mod.__esModule) return mod;

30 var result = {};

31 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

32 __setModuleDefault(result, mod);

33 return result;

34 };

35})();

36Object.defineProperty(exports, "__esModule", { value: true });

37exports.codeTool = codeTool;

38const types_1 = require("./types.js");

39const util_1 = require("./util.js");

40const logger_1 = require("./logger.js");

41const prompt = `Runs JavaScript code to interact with the Nimble API.

42

43You are a skilled TypeScript programmer writing code to interface with the service.

44Define an async function named "run" that takes a single parameter of an initialized SDK client and it will be run.

45For example:

46

47\`\`\`

48async function run(client) {

49 const response = await client.extract.run({ url: 'https://exapmle.com' });

50

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

code-tool.jsView on unpkg · L48

51 console.log(response.task_id);

52}

53\`\`\`

54

55You will be returned anything that your function returns, plus the results of any console.log statements.

56Do not add try-catch blocks for single API calls. The tool will handle errors for you.

57Do not add comments unless necessary for generating better code.

58Code will run in a container, and cannot interact with the network outside of the given SDK client.

59Variables will not persist between calls, so make sure to return or log any data you might need later.

60Remember that you are writing TypeScript code, so you need to be careful with your types.

61Always type dynamic key-value stores explicitly as Record<string, YourValueType> instead of {}.`;

62/**

63 * A tool that runs code against a copy of the SDK.

64 *

65 * Instead of exposing every endpoint as its own tool, which uses up too many tokens for LLMs to use at once,

66 * we expose a single tool that can be used to search for endpoints by name, resource, operation, or tag, and then

67 * a generic endpoint that can be used to invoke any endpoint with the provided arguments.

68 *

package.jsonView file

Lines 207-235json

207 "import": "./types.mjs",

208 "require": "./types.js"

209 },

210 "./types.js": {

211 "default": "./types.js"

212 },

213 "./types.mjs"

code-tool-worker.jsView file

•matchType = token_shingles matchedPackage = @roarkanalytics/sdk-mcp@3.6.1 matchedPath = code-tool-worker.js matchedIdentity = npm:QHJvYXJrYW5hbHl0aWNzL3Nkay1tY3A:3.6.1 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

code-tool-worker.jsView on unpkg