plumery-mcp@3.11.0: Scan Failed npm security report (Allow) | LPM Firewall

Loading npm security reports…

plumery-mcp@3.11.0: Scan Failed npm security report (Allow) | LPM Firewall

Source & flagged code

29 flagged

local-docs-search.mjsView file

6029patternName = generic_password severity = medium line = 6029

Medium

Secret Pattern

Package contains a possible secret pattern.

local-docs-search.mjsView on unpkg · L6029

6033patternName = generic_password severity = medium line = 6033

Medium

Secret Pattern

Hardcoded password in local-docs-search.mjs

local-docs-search.mjsView on unpkg · L6033

6037patternName = generic_password severity = medium line = 6037

Medium

Secret Pattern

Hardcoded password in local-docs-search.mjs

local-docs-search.mjsView on unpkg · L6037

7888patternName = generic_password severity = medium line = 7888

Medium

Secret Pattern

Hardcoded password in local-docs-search.mjs

local-docs-search.mjsView on unpkg · L7888

7892patternName = generic_password severity = medium line = 7892

Medium

Secret Pattern

Hardcoded password in local-docs-search.mjs

local-docs-search.mjsView on unpkg · L7892

7896patternName = generic_password severity = medium line = 7896

Medium

Secret Pattern

Hardcoded password in local-docs-search.mjs

local-docs-search.mjsView on unpkg · L7896

instructions.jsView file

Lines 1-27javascript

1"use strict";

2// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.

3var __importDefault = (this && this.__importDefault) || function (mod) {

4 return (mod && mod.__esModule)

code-tool.jsView file

Lines 114-154javascript

114 logger.debug('Executing code in local Deno environment');

115 result = await localDenoHandler({ reqContext, args });

116 }

117 else {

118 logger.debug('Executing code in remote Stainless environment');

package.jsonView file

Lines 1-41json

1{

2 "name": "plumery-mcp",

3 "version": "3.11.0",

4 "description": "The official MCP Server for the Plumery API",

5 "author": "Plumery <alexey.lapusta@plumery.com>",

6

code-tool.mjsView file

•matchType = normalized_sha256 matchedPackage = plumery-mcp@3.9.0 matchedPath = code-tool.mjs matchedIdentity = npm:cGx1bWVyeS1tY3A:3.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

code-tool.mjsView on unpkg

src/code-tool.tsView file

•matchType = normalized_sha256 matchedPackage = plumery-mcp@3.9.0 matchedPath = src/code-tool.ts matchedIdentity = npm:cGx1bWVyeS1tY3A:3.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/code-tool.tsView on unpkg

code-tool-worker.jsView file

•matchType = token_shingles matchedPackage = plumery-mcp@3.9.0 matchedPath = code-tool-worker.js matchedIdentity = npm:cGx1bWVyeS1tY3A:3.9.0 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

code-tool-worker.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = plumery-mcp@3.10.0 matchedIdentity = npm:cGx1bWVyeS1tY3A:3.10.0 similarity = 0.885 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

code-tool-worker.jsView on unpkg

local-docs-search.jsView file

•matchType = normalized_sha256 matchedPackage = plumery-mcp@3.9.0 matchedPath = local-docs-search.js matchedIdentity = npm:cGx1bWVyeS1tY3A:3.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

local-docs-search.jsView on unpkg

6068patternName = generic_password severity = medium line = 6068

Medium

Secret Pattern

Hardcoded password in local-docs-search.js

local-docs-search.jsView on unpkg · L6068

6072patternName = generic_password severity = medium line = 6072

Medium

Secret Pattern

Hardcoded password in local-docs-search.js

local-docs-search.jsView on unpkg · L6072

6076patternName = generic_password severity = medium line = 6076

Medium

Secret Pattern

Hardcoded password in local-docs-search.js

local-docs-search.jsView on unpkg · L6076

src/local-docs-search.tsView file

7207patternName = generic_password severity = medium line = 7207

Medium

Secret Pattern

Hardcoded password in src/local-docs-search.ts

src/local-docs-search.tsView on unpkg · L7207

7212patternName = generic_password severity = medium line = 7212

Medium

Secret Pattern

Hardcoded password in src/local-docs-search.ts

src/local-docs-search.tsView on unpkg · L7212

7217patternName = generic_password severity = medium line = 7217

Medium

Secret Pattern

Hardcoded password in src/local-docs-search.ts

src/local-docs-search.tsView on unpkg · L7217

9472patternName = generic_password severity = medium line = 9472

Medium

Secret Pattern

Hardcoded password in src/local-docs-search.ts

src/local-docs-search.tsView on unpkg · L9472