spidra-mcp@0.3.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

spidra-mcp@0.3.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-fastmcp-consent.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/index.jsView file

16Source sends the broad process environment to a literal external destination. L16: var require2 = createRequire(import.meta.url); L17: var { version: packageVersion } = require2("../package.json"); L18: var HTTP_MODE = process.env.HTTP_STREAMABLE_SERVER === "true"; L19: var PORT = Number(process.env.PORT || 3e3); ... L56: tokenEndpoint: `${process.env.SPIDRA_API_URL}/oauth/token`, L57: // fastmcp's default (loopback-only: http://localhost:*, http://127.0.0.1:*) L58: // covers CLI-style loopback clients (Claude Code, Cursor desktop, VS Code ... L84: }, L85: body: JSON.stringify({ access_token: accessToken }) L86: }); ... L90: } L91: const data = await response.json();

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/index.jsView on unpkg · L16

16var require2 = createRequire(import.meta.url); L17: var { version: packageVersion } = require2("../package.json"); L18: var HTTP_MODE = process.env.HTTP_STREAMABLE_SERVER === "true"; L19: var PORT = Number(process.env.PORT || 3e3); ... L56: tokenEndpoint: `${process.env.SPIDRA_API_URL}/oauth/token`, L57: // fastmcp's default (loopback-only: http://localhost:*, http://127.0.0.1:*) L58: // covers CLI-style loopback clients (Claude Code, Cursor desktop, VS Code ... L84: }, L85: body: JSON.stringify({ access_token: accessToken }) L86: }); ... L90: } L91: const data = await response.json();

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L16

16Trigger-reachable chain: manifest.bin -> dist/index.js L16: var require2 = createRequire(import.meta.url); L17: var { version: packageVersion } = require2("../package.json"); L18: var HTTP_MODE = process.env.HTTP_STREAMABLE_SERVER === "true"; L19: var PORT = Number(process.env.PORT || 3e3); ... L56: tokenEndpoint: `${process.env.SPIDRA_API_URL}/oauth/token`, L57: // fastmcp's default (loopback-only: http://localhost:*, http://127.0.0.1:*) L58: // covers CLI-style loopback clients (Claude Code, Cursor desktop, VS Code ... L84: }, L85: body: JSON.stringify({ access_token: accessToken }) L86: }); ... L90: } L91: const data = await response.json();

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L16

16Trigger-reachable credential exfiltration chain: manifest.bin -> dist/index.js L16: var require2 = createRequire(import.meta.url); L17: var { version: packageVersion } = require2("../package.json"); L18: var HTTP_MODE = process.env.HTTP_STREAMABLE_SERVER === "true"; L19: var PORT = Number(process.env.PORT || 3e3); ... L56: tokenEndpoint: `${process.env.SPIDRA_API_URL}/oauth/token`, L57: // fastmcp's default (loopback-only: http://localhost:*, http://127.0.0.1:*) L58: // covers CLI-style loopback clients (Claude Code, Cursor desktop, VS Code ... L84: }, L85: body: JSON.stringify({ access_token: accessToken }) L86: }); ... L90: } L91: const data = await response.json();

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L16

scripts/patch-fastmcp-consent.mjsView file

•matchType = normalized_sha256 matchedPackage = spidra-mcp@0.6.0 matchedPath = scripts/patch-fastmcp-consent.mjs matchedIdentity = npm:c3BpZHJhLW1jcA:0.6.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/patch-fastmcp-consent.mjsView on unpkg