Loading npm security reports…

social-autoposter@1.7.7: Malicious npm security report (Block) | LPM Firewall

registry / social-autoposter / 1.7.7

social-autoposter@1.7.7

Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

Once the registered MCP server starts, it automatically exports scoped Claude transcripts, pipeline logs, and local configuration/persona data. These transmissions are enabled by default and require environment-variable opt-out.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Starting the package-owned MCP server after setup or client restart.

Impact

Remote disclosure of user prompts, tool-result excerpts, social-posting configuration, persona corpus, and subprocess output.

Mechanism

default background telemetry, log streaming, state sync, and transcript relay

Attack narrative

The MCP server starts a default-on relay that reads newly written Claude session transcripts from package-matching project folders, preserves user/assistant text and tool-result excerpts, and posts them to app.s4l.ai. It also sends raw subprocess logs plus configuration and persona-corpus snapshots to package-controlled endpoints; opt-out requires setting undocumented environment flags rather than affirmative consent.

Rationale

Source establishes automatic, remote transmission of user content and local operational data after MCP startup. This is concrete data exfiltration, not merely package-aligned network use.

Evidence

mcp/dist/index.jsscripts/relay_session_transcripts.pymcp/dist/telemetry.jsmcp/install.mjspackage.json~/.claude/projects/*/*.jsonl~/.social-autoposter-mcp/transcript-relay-state.json~/.social-autoposter-mcp/config.json

Source & flagged code

9 flagged · loading source

bin/cookie-helper.jsView file

•matchType = normalized_sha256 matchedPackage = @m13v/s4l@1.7.5 matchedPath = bin/cookie-helper.js matchedIdentity = npm:QG0xM3YvczRs:1.7.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cookie-helper.jsView on unpkg

13L14: const { spawn, spawnSync } = require('child_process'); L15: const fs = require('fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cookie-helper.jsView on unpkg · L13

bin/scheduler/launchd.jsView file

4Trigger-reachable persistence chain: manifest.bin -> bin/cli.js -> bin/scheduler/index.js -> bin/scheduler/launchd.js L4: const fs = require('fs'); L5: const { execSync, spawnSync } = require('child_process'); L6: const platform = require('../platform'); ... L32: \t<array> L33: \t\t<string>/bin/bash</string> L34: \t\t<string>${job.script}</string> ... L38: \t<key>StandardOutPath</key> L39: \t<string>${job.stdoutLog}</string> L40: \t<key>StandardErrorPath</key> ... L80: try { L81: const out = execSync('launchctl list', { stdio: 'pipe', maxBuffer: 8 * 1024 * 1024 }).toString(); L82: for (const line of out.split('\n').slice(1)) {

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

bin/scheduler/launchd.jsView on unpkg · L4

•matchType = normalized_sha256 matchedPackage = @m13v/s4l@1.7.5 matchedPath = bin/scheduler/launchd.js matchedIdentity = npm:QG0xM3YvczRs:1.7.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/scheduler/launchd.jsView on unpkg

4const fs = require('fs'); L5: const { execSync, spawnSync } = require('child_process'); L6: const platform = require('../platform'); ... L32: \t<array> L33: \t\t<string>/bin/bash</string> L34: \t\t<string>${job.script}</string> ... L38: \t<key>StandardOutPath</key> L39: \t<string>${job.stdoutLog}</string> L40: \t<key>StandardErrorPath</key> ... L80: try { L81: const out = execSync('launchctl list', { stdio: 'pipe', maxBuffer: 8 * 1024 * 1024 }).toString(); L82: for (const line of out.split('\n').slice(1)) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/scheduler/launchd.jsView on unpkg · L4

skill/dm-outreach-reddit.shView file

•path = skill/dm-outreach-reddit.sh kind = build_helper sizeBytes = 17070 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skill/dm-outreach-reddit.shView on unpkg

mcp/dist/screencast.jsView file

•matchType = normalized_sha256 matchedPackage = @m13v/s4l@1.7.5 matchedPath = mcp/dist/screencast.js matchedIdentity = npm:QG0xM3YvczRs:1.7.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

mcp/dist/screencast.jsView on unpkg

mcp/shared/doctor.cjsView file

•matchType = normalized_sha256 matchedPackage = @m13v/s4l@1.7.5 matchedPath = mcp/shared/doctor.cjs matchedIdentity = npm:QG0xM3YvczRs:1.7.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

mcp/shared/doctor.cjsView on unpkg

mcp/dist/onboarding.jsView file

•matchType = normalized_sha256 matchedPackage = @m13v/s4l@1.7.5 matchedPath = mcp/dist/onboarding.js matchedIdentity = npm:QG0xM3YvczRs:1.7.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

mcp/dist/onboarding.jsView on unpkg

Source & flagged code

9 flagged

bin/cookie-helper.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2'use strict';

3

4/**

5 * Export and import browser cookies for social-autoposter profiles.

6 *

7 * Export: connects to running Playwright browser instances via CDP to extract

8 * cookies. Falls back to launching headless Chrome if no running browser found.

9 *

10 * Import: launches headless Chromium per platform profile, injects cookies

11 * via CDP (Network.setCookies) so they persist to the profile on disk.

12 */

13

14const { spawn, spawnSync } = require('child_process');

15const fs = require('fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cookie-helper.jsView on unpkg · L13

16const path = require('path');

17const os = require('os');

18const http = require('http');

19

20const HOME = os.homedir();

21const DEST = path.join(HOME, 'social-autoposter');

22const PROFILES_DIR = path.join(HOME, '.claude', 'browser-profiles');

23const PLATFORMS = ['reddit', 'twitter', 'linkedin'];

24

25// ── WebSocket ──

26

27let WS;

28try {

29 if (typeof globalThis.WebSocket !== 'undefined') {

30 WS = globalThis.WebSocket;

31 } else {

32 try { WS = require('ws'); } catch {

33 try { WS = require(path.join('/usr/lib/node_modules', 'ws')); } catch {}

•matchType = normalized_sha256 matchedPackage = @m13v/s4l@1.7.5 matchedPath = bin/cookie-helper.js matchedIdentity = npm:QG0xM3YvczRs:1.7.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cookie-helper.jsView on unpkg

bin/scheduler/launchd.jsView file

Lines 1-24javascript

1'use strict';

2

3const path = require('path');

4const fs = require('fs');

5const

skill/dm-outreach-reddit.shView file

•path = skill/dm-outreach-reddit.sh kind = build_helper sizeBytes = 17070 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skill/dm-outreach-reddit.shView on unpkg

mcp/dist/screencast.jsView file

•matchType = normalized_sha256 matchedPackage = @m13v/s4l@1.7.5 matchedPath = mcp/dist/screencast.js matchedIdentity = npm:QG0xM3YvczRs:1.7.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

mcp/dist/screencast.jsView on unpkg

mcp/shared/doctor.cjsView file

•matchType = normalized_sha256 matchedPackage = @m13v/s4l@1.7.5 matchedPath = mcp/shared/doctor.cjs matchedIdentity = npm:QG0xM3YvczRs:1.7.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

mcp/shared/doctor.cjsView on unpkg

mcp/dist/onboarding.jsView file

•matchType = normalized_sha256 matchedPackage = @m13v/s4l@1.7.5 matchedPath = mcp/dist/onboarding.js matchedIdentity = npm:QG0xM3YvczRs:1.7.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

mcp/dist/onboarding.jsView on unpkg