pintumcp@1.2.34
Agent Alerts MCP — desktop notifications with sound for AI coding agents
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe automatic install-time agent setup creates a guarded, package-owned extension lifecycle risk. The inspected behavior supports a warning, not a publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
Installing the package through npm invokes postinstall.
Impact
Agent configuration is changed during package installation without a separate setup prompt, enabling the package’s notification integration.
Mechanism
The hook runs the CLI install command, which configures detected tools and adds pintumcp-owned Claude Code event hooks when the settings directory is present.
AI rationale
The automatic install-time agent setup creates a guarded, package-owned extension lifecycle risk. The inspected behavior supports a warning, not a publish block.
Evidence
package.jsoninstall.jsbin/pintumcp.jslib/hooks.jslib/configure.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json runs install.js from its postinstall hook, which automatically invokes the CLI install command.
- The CLI install flow configures detected AI tools and adds Claude Code hooks when its settings directory and the Python path exist.
- The Claude hook setup adds package-owned commands to multiple Claude Code events; it updates the settings file without a separate consent prompt.
Evidence against
- The inspected setup adds pintumcp’s own notification integration; it does not show credential collection, unrelated configuration changes, or a remote payload.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg9"scripts": {
"postinstall": "node install.js"
},
"keywords": [
"mcp",
"notifications",
"
Medium
Suspicious Lifecycle Evidence
package.json runs install.js from its postinstall hook, which automatically invokes the CLI install command.
package.jsonView on unpkg · L9python/tray_cross.pyView file
Findings
1 High8 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helperpython/tray_cross.py
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumSuspicious Lifecycle Evidenceinstall.js
MediumAi Review Evidencebin/pintumcp.js
MediumAi Review Evidencebin/pintumcp.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to pintumcp@1.2.34.
See all versions of pintumcp for other recorded verdicts.
- Review the evidence and your use of pintumcp@1.2.34 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.