suppa-mcp-2@1.14.0

⚠ Under review

MCP server for the Suppa platform (modern.suppa.me) — Tasks, Docs/Pages, Entities & Schema, Forms, Automations, and file attachments, with multi-tenant Google auth. Node port of PyPI suppa-mcp.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 95.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 30 file(s), 753 KB of source, external domains: accounts.google.com, blocked.invalid, modern.suppa.me, registry.npmjs.org, sp.modern-expo.com

Source & flagged code

5 flagged

dist/tools/entityCode.jsView file

81try { L82: const mod = await import(pathToFileURL(p).href); L83: return String(mod.BLOCKING_SUMMARY ?? "").trim() || "the house rules in SKILL.md";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/entityCode.jsView on unpkg · L81

dist/version.jsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/version.js: * node_modules holds; publishing a fix changes nothing until that client is import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs"; const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`; writeFileSync(tmp, `${JSON.stringify(cache, null, 2)}\n`, "utf-8");

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/version.jsView on unpkg

skills/suppa-entity-code/scripts/install-entity-code-guards.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: rltopath } from "node:url"; const here = dirname(fileurltopath(import.meta.url)); const guard = join(here, "entity-code-guard.mjs"); const agents_template = join(here, "..", "templates", "agents.entity-code.md"); const begin = ""; const end = ""; const args = process.argv.slice(2); const dryrun = args.includes("--dry-run"); const nogit = args.includes("--no-git"); const root = resolve(args.find((a) => !a.startswith("--")) ?? process.cwd()); const done = []; const skipped = []; function write(path, content) { if (dryrun) { done.push(`would write ${relative(root, path) || path}`)

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

skills/suppa-entity-code/scripts/install-entity-code-guards.mjsView on unpkg

dist/tools/files.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/tools/files.js#virtual:normalized:round1View on unpkg

dist/auth.jsView file

•matchType = token_shingles matchedPackage = suppa-mcp-2@1.21.2 matchedPath = dist/auth.js matchedIdentity = npm:c3VwcGEtbWNwLTI:1.21.2 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/auth.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/tools/entityCode.jsView file

81try { L82: const mod = await import(pathToFileURL(p).href); L83: return String(mod.BLOCKING_SUMMARY ?? "").trim() || "the house rules in SKILL.md";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/entityCode.jsView on unpkg · L81

dist/version.jsView file

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/version.jsView on unpkg

skills/suppa-entity-code/scripts/install-entity-code-guards.mjs

Findings

4 High4 Medium5 Low

HighEntrypoint Foreign Package Code Overwritedist/version.js

HighExternal Ai Agent Control Surface Mutationskills/suppa-entity-code/scripts/install-entity-code-guards.mjs

HighSemantic Analysis Limiteddist/tools/files.js#virtual:normalized:round1

HighKnown Malware Source Similaritydist/auth.js

MediumDynamic Requiredist/tools/entityCode.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to suppa-mcp-2@1.14.0.

See all versions of suppa-mcp-2 for other recorded verdicts.

Review the evidence and your use of suppa-mcp-2@1.14.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 10:02:08.950Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.