registry / Credential exfiltration / sdlc-agent-4-enterprise-server

sdlc-agent-4-enterprise-server

Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration

This report shows the evidence for sdlc-agent-4-enterprise-server@1.53.2. 1 of 42 known versions is blocked or flagged. The newest version, 1.55.0, is allowed. See all versions.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

Source inspection confirms an active credential transfer from the Pega discovery route to a package-selected default host without a destination allowlist or recipient-specific consent. The optional caller override does not protect the default path.

Static reason

One or more suspicious static signals were detected.

Trigger

An authenticated caller invokes Pega discovery with an auth header or PEGA_AUTH configured, leaving the default endpoint in place.

Impact

The default recipient receives the Pega authorization credential, exposing it outside a recipient explicitly selected by the caller.

Mechanism

The route passes the auth header to a client that adds it to outbound requests to the configured base URL; that URL defaults to cjpge4gy.pegacea.net.

Attack narrative

When an authenticated caller invokes Pega discovery with an authorization header and omits a destination override, the route selects a package default host and passes the credential to the Pega client. The client sends it in an outbound authorization header without a destination restriction. This exposes the credential to the package-selected recipient.

AI rationale

Evidence

dist/server/routes/pega-api.jsdist/modules/pega/discovery/PegaCodeIntelClient.jsdist/server/HttpServer.js

Network endpoints1

cjpge4gy.pegacea.net

Decision evidence

public snapshot

AI called this Malicious at 94.0% confidence as Malware with low false-positive risk.

Evidence for block

The reachable Pega discovery route uses a package-selected host by default, while allowing optional URL overrides.
The route accepts a request auth header or PEGA_AUTH and passes it with the selected base URL to discovery.
The Pega client places that header in outbound requests without restricting the destination.
The Pega API routes are mounted on the server.

Evidence against

The transfer requires a discovery request and an auth header; callers can supply a URL override, but omitting it retains the package default.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

Source & flagged code

14 flagged

test-index.cjsView file

Lines 1-35javascript

1const http = require('http');

2function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

3 return new Promise((resolve) => {

4 const u = new URL(url);

5 const data = JSON.stringify(body);

6 const req = http.request({ hostname: u.hostname, port: u.port, path: u.pathname, method: 'POST', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(data), ...headers } }, res => {

7 let d = ''; res.on('data', c => d += c); res.on('end', () => resolve({ status: res.statusCode, body: d }));

8 });

9 req.on('error', e => resolve({ status: 0, body: e.message }));

10 req.write(data); req.end();

11 });

12}

13async function run() {

14 // Login

15 const login = await post('http://127.0.0.1:48721/api/admin/auth/login', { username: 'admin', password: 'Admin@123456' });

Medium

Secret Pattern

Package contains a possible secret pattern.

test-index.cjsView on unpkg · L15

16 console.log('Login:', login.status);

17 if (login.status !== 200) { console.log('Login failed:', login.body); return; }

18 const token = JSON.parse(login.body).token;

19 console.log('Token:', token.substring(0, 20) + '...');

21 // Trigger full index

22 const idx = await post('http://127.0.0.1:48721/api/index/full', {}, {

23 'Authorization': 'Bearer ' + token,

24 'X-Project-Id': 'SDLC-Agents-4-Enterprise',

25 'X-Workspace-Root': 'c:\\projects\\kiro\\SDLC-Agents-4-Enterprise'

26 });

27 console.log('POST /api/index/full:', idx.status, idx.body.substring(0, 300));

29 // Wait a bit then check progress

30 await new Promise(r => setTimeout(r, 3000));

31 const prog = await new Promise((resolve) => {

32 const u = new URL('http://127.0.0.1:48721/api/index/progress');

33 http.get({ hostname: u.hostname, port: u.port, path: u.pathname, headers: { 'Authorization': 'Bearer ' + token, 'X-Project-Id': 'SDLC-Agents-4-Enterprise' } }, res => {

34 let d = ''; res.on('data', c => d += c); res.on('end', () => resolve({ status: res.statusCode, body: d }));

35 }).on('error', e => resolve({ status: 0, body: e.message }));

start.jsView file

Lines 1-24javascript

1/* This script starts the FastAPI and Next.js servers, setting up user configuration if necessary. It reads environment variables to configure API keys and other settings, ensuring that the user configuration file is created if it doesn't exist. The script also handles the starting of both servers and keeps the Node.js process alive until one of the servers exits. */

3import { join, dirname } from "path";

4import { fileURLToPath } from "url";

5import { spawn } from "child_process";

dist/modules/sandbox/executors/LocalExecutor.jsView file

Lines 37-77javascript

37 workdir: config.workdir,

38 };

39 }

40 async destroySession(_session) {

41 // Best-effort: kill any lingering child process tracked for this session.

42 return;

43 }

44 async

dist/viewer/admin/vendor/d3.min.jsView file

Lines 1-3javascript

2!function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView file

Lines 11-51javascript

11 }

12 analyze(content, _options) {

13 const lines = content.split('\n');

14 const lineCount

dist/viewer/3d-force-graph.min.jsView file

1// Version 1.80.0 3d-force-graph - https://github.com/vasturiano/3d-force-graph L2: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:... L3: // <http://www.w3.org/TR/2008/REC-WCAG20-20081211/#contrast-ratiodef (WCAG Version 2) L4: // Analyze the 2 colors and returns the color contrast defined by (WCAG Version 2) L5: op.readability=function(e,t){var n=op(e),i=op(t);return(Math.max(n.getLuminance(),i.getLuminance())+.05)/(Math.min(n.getLuminance(),i.getLuminance())+.05)},op.isReadable=function(e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

dist/engine/tools/drawio-renderers.jsView file

Lines 1-21javascript

1import * as fs from 'fs';

2import { execSync } from 'child_process';

3let _cachedDrawioCliPath = null;

4export

tests/e2e/setup/global-setup.tsView file

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.tsView on unpkg · L48

dist/engine/parsers/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/engine/parsers/grammars/tree-sitter-go.wasmView on unpkg

models/onnx-runtime/generate-identity-model.pyView file

•path = models/onnx-runtime/generate-identity-model.py kind = build_helper sizeBytes = 802 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

models/onnx-runtime/generate-identity-model.pyView on unpkg

servers/fastapi/tests/mocks/normalizers.pyView file

•path = [redacted].py kind = payload_in_excluded_dir sizeBytes = 489 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

servers/fastapi/tests/mocks/normalizers.pyView on unpkg

dist/modules/memory/llm/LLMInitializer.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 12

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/modules/memory/llm/LLMInitializer.js#virtual:normalized:round1View on unpkg

check-tasks-quick.cjsView file

4patternName = generic_password severity = medium line = 4

Medium

Secret Pattern

Hardcoded password in check-tasks-quick.cjs

check-tasks-quick.cjsView on unpkg · L4

Source & flagged code

14 flagged · loading source

test-index.cjsView file

15patternName = generic_password severity = medium line = 15

Medium

Secret Pattern

Package contains a possible secret pattern.

test-index.cjsView on unpkg · L15

1const http = require('http'); L2: function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

Findings

7 High9 Medium8 Low

HighChild Processstart.js

HighShelldist/modules/sandbox/executors/LocalExecutor.js

HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js

HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js

HighRuntime Package Installtests/e2e/setup/global-setup.ts

HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py

HighSemantic Analysis Limiteddist/modules/memory/llm/LLMInitializer.js#virtual:normalized:round1

MediumSecret Patterntest-index.cjs

MediumDynamic Requiretest-index.cjs

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Moduledist/engine/parsers/grammars/tree-sitter-go.wasm

Affected versions and remediation

This report applies to sdlc-agent-4-enterprise-server@1.53.2.

The versions list below shows the verdict for each recorded version.

Avoid installing sdlc-agent-4-enterprise-server@1.53.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-16 09:04:39.306Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

42 known versions

1.55.0latestManual Review—AllowUnder ReviewOct 21, 2026, 10:44 PM 1.54.4SuspiciousAI-agent capability abuseWarnPublishedOct 21, 2026, 1:32 PM 1.54.3Manual Review—AllowUnder ReviewOct 21, 2026, 12:40 PM 1.54.2Manual Review—AllowUnder Review

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other credential exfiltration packages

Behavioral surface

Related packages

Other credential exfiltration packages

Source & flagged code