registry / Remote code execution / sdlc-agent-4-enterprise-server / 1.28.0

sdlc-agent-4-enterprise-server@1.28.0

Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package has no install-time execution, but its default runtime configuration exposes an unauthenticated path from HTTP input to arbitrary child-process execution. This warrants a warning for a critical vulnerability rather than a malicious-package block.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A network request to POST /api/mcp-servers after the package server is started.

Impact

Remote code execution and possible exposure of inherited environment secrets.

Mechanism

Unauthenticated config-to-stdio child-process execution.

AI rationale

Evidence

src/server/HttpServer.tssrc/modules/orchestration/McpConfigRoutes.tssrc/modules/orchestration/McpConfigService.tssrc/modules/orchestration/health/TransportFactory.tssrc/config/index.ts.code-intel/orchestration.json

Network endpoints1

0.0.0.0

Decision evidence

public snapshot

AI called this Suspicious at 98.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

Unauthenticated MCP-server REST routes are registered at runtime.
POST accepts a server config and immediately connects it.
A supplied command becomes a stdio child process inheriting environment variables.
Server defaults to binding 0.0.0.0.

Evidence against

No preinstall, install, or postinstall hook; only prepublishOnly.
No source evidence of covert exfiltration or staged payload delivery.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2,134 file(s), 11.9 MB of source, external domains: 127.0.0.1, 192.168.1.7, 9ucseukj.pegaacademy.net, api-eu.mixpanel.com, api.anthropic.com, api.cerebras.ai, api.deepseek.com, api.duckduckgo.com, api.fireworks.ai, api.github.com, api.google.com, api.openai.com, api.together.ai, api.together.xyz, cdn.jsdelivr.net, cdn.tailwindcss.com, customer.example.com, discord.com, docs.presenton.ai, example.com, fireworks.ai, fonts.googleapis.com, generativelanguage.googleapis.com, github.com, gitlab.com, host.docker.internal, i.pravatar.cc, images.pexels.com, images.unsplash.com, inference-docs.cerebras.ai, jcgt.org, jira.example.com, json-schema.org, mdn.io, ollama.com, opencode.ai, openrouter.ai, platform.deepseek.com, plus.unsplash.com, presenton-public-assets.s3.ap-southeast-1.amazonaws.com, presenton-public.s3.ap-southeast-1.amazonaws.com, presenton.ai, search.example.com, static.thenounproject.com, unpkg.com, upload.wikimedia.org, via.placeholder.com, viewer.diagrams.net, www.google.com, www.shadertoy.com

Source & flagged code

30 flagged

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

dist/database/adapters/MysqlAdapter.jsView file

89} L90: async execAsync(sql) { await this.pool.promise().query(sql); } L91: async transactionAsync(fn) {

High

Shell

Package source references shell execution.

dist/database/adapters/MysqlAdapter.jsView on unpkg · L89

dist/viewer/3d-force-graph.min.jsView file

1// Version 1.80.0 3d-force-graph - https://github.com/vasturiano/3d-force-graph L2: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:... L3: // <http://www.w3.org/TR/2008/REC-WCAG20-20081211/#contrast-ratiodef (WCAG Version 2) L4: // Analyze the 2 colors and returns the color contrast defined by (WCAG Version 2) L5: op.readability=function(e,t){var n=op(e),i=op(t);return(Math.max(n.getLuminance(),i.getLuminance())+.05)/(Math.min(n.getLuminance(),i.getLuminance())+.05)},op.isReadable=function(e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

test-index.cjsView file

1const http = require('http'); L2: function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

15patternName = generic_password severity = medium line = 15 matchedText = const lo... });

Medium

Secret Pattern

Hardcoded password in test-index.cjs

test-index.cjsView on unpkg · L15

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView file

31``, L32: `Basic metadata:`, L33: `- Lines: ${lineCount}`, ... L61: for (let i = 0; i < Math.min(content.length, 1000); i++) { L62: const code = content.charCodeAt(i); L63: // Allow common whitespace: tab(9), newline(10), carriage return(13)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView on unpkg · L31

dist/engine/tools/drawio-renderers.jsView file

1import * as fs from 'fs'; L2: import { execSync } from 'child_process'; L3: let _cachedDrawioCliPath = null; ... L13: const candidates = []; L14: if (process.platform === 'win32') { L15: candidates.push('C:\\Program Files\\draw.io\\draw.io.exe', `${process.env.LOCALAPPDATA || ''}\\Programs\\draw.io\\draw.io.exe`, `${process.env.PROGRAMFILES || ''}\\draw.io\\draw.io... L16: } ... L45: const xml = fs.readFileSync(inputPath, 'utf-8'); L46: const encoded = Buffer.from(xml).toString('base64'); L47: const viewerUrl = `https://viewer.diagrams.net/?lightbox=1&nav=0#R${encoded}`; L48: await orchestrationEngine.executeUpstreamTool('chrome-devtools-mcp', 'navigate_page', {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/engine/tools/drawio-renderers.jsView on unpkg · L1

tests/e2e/setup/global-setup.tsView file

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.tsView on unpkg · L48

src/engine/parsers/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/engine/parsers/grammars/tree-sitter-go.wasmView on unpkg

scripts/rebuild_notice_all.pyView file

•path = scripts/rebuild_notice_all.py kind = build_helper sizeBytes = 10840 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/rebuild_notice_all.pyView on unpkg

servers/fastapi/tests/mocks/normalizers.pyView file

•path = [redacted].py kind = payload_in_excluded_dir sizeBytes = 489 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

servers/fastapi/tests/mocks/normalizers.pyView on unpkg

servers/nextjs/app/api/templates/route.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

servers/nextjs/app/api/templates/route.tsView on unpkg

dist/config/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = sdlc-agent-4-enterprise-server@1.27.1 matchedIdentity = npm:[redacted]:1.27.1 similarity = 0.867 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/config/index.jsView on unpkg

check-tasks-quick.cjsView file

4patternName = generic_password severity = medium line = 4 matchedText = user: 's...24',

Medium

Secret Pattern

Hardcoded password in check-tasks-quick.cjs

check-tasks-quick.cjsView on unpkg · L4

dist/modules/memory/masking/detectors/CredentialDetector.jsView file

4patternName = generic_password severity = medium line = 4 matchedText = password...,}',

Medium

Secret Pattern

Hardcoded password in dist/modules/memory/masking/detectors/CredentialDetector.js

dist/modules/memory/masking/detectors/CredentialDetector.jsView on unpkg · L4

check-pg.cjsView file

3patternName = generic_password severity = medium line = 3 matchedText = const cl... });

Medium

Secret Pattern

Hardcoded password in check-pg.cjs

check-pg.cjsView on unpkg · L3

check-llm-tasks.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in check-llm-tasks.cjs

check-llm-tasks.cjsView on unpkg · L2

fix-schema.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-schema.cjs

fix-schema.cjsView on unpkg · L2

check-structure.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in check-structure.cjs

check-structure.cjsView on unpkg · L2

verify-schema.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in verify-schema.cjs

verify-schema.cjsView on unpkg · L2

check-project-ids.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in check-project-ids.cjs

check-project-ids.cjsView on unpkg · L2

fix-project-id.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-project-id.cjs

fix-project-id.cjsView on unpkg · L2

fix-pg-schema-final.cjsView file

6patternName = generic_password severity = medium line = 6 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-pg-schema-final.cjs

fix-pg-schema-final.cjsView on unpkg · L6

recreate-index-tables.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in recreate-index-tables.cjs

recreate-index-tables.cjsView on unpkg · L2

fix-sequences.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-sequences.cjs

fix-sequences.cjsView on unpkg · L2

analyze-perf.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in analyze-perf.cjs

analyze-perf.cjsView on unpkg · L2

src/modules/memory/masking/detectors/CredentialDetector.tsView file

7patternName = generic_password severity = medium line = 7 matchedText = password...,}',

Medium

Secret Pattern

Hardcoded password in src/modules/memory/masking/detectors/CredentialDetector.ts

src/modules/memory/masking/detectors/CredentialDetector.tsView on unpkg · L7

Source & flagged code

30 flagged · loading source

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

Findings

3 Critical7 High22 Medium7 Low

CriticalCritical Secretsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

CriticalPrevious Version Dangerous Deltadist/config/index.js

CriticalSecret Patternsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

HighChild Processstart.js

HighShelldist/database/adapters/MysqlAdapter.js

HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js

HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js

HighRuntime Package Installtests/e2e/setup/global-setup.ts

HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py

HighSemantic Analysis Limitedservers/nextjs/app/api/templates/route.ts

Affected versions and remediation

This report applies to sdlc-agent-4-enterprise-server@1.28.0.

See all versions of sdlc-agent-4-enterprise-server for other recorded verdicts.

Review the evidence and your use of sdlc-agent-4-enterprise-server@1.28.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-18 00:42:10.221Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code