spidra-mcp@0.2.5: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

spidra-mcp@0.2.5: AI-agent control-surface risk | LPM Firewall

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-fastmcp-consent.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/index.jsView file

16Source sends the broad process environment to a literal external destination. L16: var require2 = createRequire(import.meta.url); L17: var { version: packageVersion } = require2("../package.json"); L18: var HTTP_MODE = process.env.HTTP_STREAMABLE_SERVER === "true"; L19: var PORT = Number(process.env.PORT || 3e3); ... L56: tokenEndpoint: `${process.env.SPIDRA_API_URL}/oauth/token`, L57: // fastmcp's default (loopback-only: http://localhost:*, http://127.0.0.1:*) L58: // covers Claude Code's CLI-style loopback redirect, but the hosted Claude ... L76: }, L77: body: JSON.stringify({ access_token: accessToken }) L78: }); ... L82: } L83: const data = await response.json();

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/index.jsView on unpkg · L16

16var require2 = createRequire(import.meta.url); L17: var { version: packageVersion } = require2("../package.json"); L18: var HTTP_MODE = process.env.HTTP_STREAMABLE_SERVER === "true"; L19: var PORT = Number(process.env.PORT || 3e3); ... L56: tokenEndpoint: `${process.env.SPIDRA_API_URL}/oauth/token`, L57: // fastmcp's default (loopback-only: http://localhost:*, http://127.0.0.1:*) L58: // covers Claude Code's CLI-style loopback redirect, but the hosted Claude ... L76: }, L77: body: JSON.stringify({ access_token: accessToken }) L78: }); ... L82: } L83: const data = await response.json();

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L16

16Trigger-reachable chain: manifest.bin -> dist/index.js L16: var require2 = createRequire(import.meta.url); L17: var { version: packageVersion } = require2("../package.json"); L18: var HTTP_MODE = process.env.HTTP_STREAMABLE_SERVER === "true"; L19: var PORT = Number(process.env.PORT || 3e3); ... L56: tokenEndpoint: `${process.env.SPIDRA_API_URL}/oauth/token`, L57: // fastmcp's default (loopback-only: http://localhost:*, http://127.0.0.1:*) L58: // covers Claude Code's CLI-style loopback redirect, but the hosted Claude ... L76: }, L77: body: JSON.stringify({ access_token: accessToken }) L78: }); ... L82: } L83: const data = await response.json();

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L16

16Trigger-reachable credential exfiltration chain: manifest.bin -> dist/index.js L16: var require2 = createRequire(import.meta.url); L17: var { version: packageVersion } = require2("../package.json"); L18: var HTTP_MODE = process.env.HTTP_STREAMABLE_SERVER === "true"; L19: var PORT = Number(process.env.PORT || 3e3); ... L56: tokenEndpoint: `${process.env.SPIDRA_API_URL}/oauth/token`, L57: // fastmcp's default (loopback-only: http://localhost:*, http://127.0.0.1:*) L58: // covers Claude Code's CLI-style loopback redirect, but the hosted Claude ... L76: }, L77: body: JSON.stringify({ access_token: accessToken }) L78: }); ... L82: } L83: const data = await response.json();

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L16