Loading npm security reports…

suppa-mcp-2@1.34.0: AI-agent control-surface risk | LPM Firewall

registry / suppa-mcp-2 / 1.34.0

suppa-mcp-2@1.34.0

MCP server for the Suppa platform (modern.suppa.me) — Tasks, Docs/Pages, Entities & Schema, Forms, Automations, and file attachments, with multi-tenant Google auth. Node port of PyPI suppa-mcp.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. On installation, the package can modify a qualifying consumer repository's AI-agent controls and development workflow. It installs hooks and instructions without an explicit setup command.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall in a project detected as using Suppa code.

Impact

It can control agent hook behavior and alter repository files, Git behavior, CI files, and npm scripts.

Mechanism

Automatic consumer-project AI-agent and workflow configuration mutation.

Policy narrative

Installing the package runs postinstall. In a project it identifies as a Suppa application, that script launches an installer against the consumer repository. The installer writes Claude command hooks and agent instruction files, configures a Git pre-commit hook, creates a CI configuration file, and changes the consumer package.json. These are broad control-surface changes made automatically rather than through an explicit user setup command.

AI rationale

The automatic postinstall chain makes broad changes to a consumer project's AI-agent control surface and development configuration. The safeguards limit targets but do not provide consent for those changes.

Evidence

package.jsonskills/suppa-entity-code/scripts/postinstall.mjsskills/suppa-entity-code/scripts/install-entity-code-guards.mjs.claude/settings.jsonAGENTS.mdCLAUDE.md.githooks/pre-commit.gitlab/suppa-schema-gate.yml

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node skills/suppa-entity-code/scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node skills/suppa-entity-code/scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/tools/entityCode.jsView file

81try { L82: const mod = await import(pathToFileURL(p).href); L83: return String(mod.BLOCKING_SUMMARY ?? "").trim() || "the house rules in SKILL.md";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/entityCode.jsView on unpkg · L81

dist/version.jsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/version.js: * node_modules holds; publishing a fix changes nothing until that client is import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs"; const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`; writeFileSync(tmp, `${JSON.stringify(cache, null, 2)}\n`, "utf-8");

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/version.jsView on unpkg

dist/auth.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/auth.js#virtual:normalized:round1View on unpkg

dist/auth.jsView file

•matchType = normalized_sha256 matchedPackage = suppa-mcp-2@1.31.1 matchedPath = dist/auth.js matchedIdentity = npm:c3VwcGEtbWNwLTI:1.31.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/auth.jsView on unpkg

dist/selfcheck.jsView file

•matchType = normalized_sha256 matchedPackage = suppa-mcp-2@1.31.1 matchedPath = dist/selfcheck.js matchedIdentity = npm:c3VwcGEtbWNwLTI:1.31.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfcheck.jsView on unpkg

dist/tools/files.jsView file

•matchType = normalized_sha256 matchedPackage = suppa-mcp-2@1.31.1 matchedPath = dist/tools/files.js matchedIdentity = npm:c3VwcGEtbWNwLTI:1.31.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/files.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 8-48json

8 "suppa-mcp": "dist/bin.js",

9 "suppa-entity-guards": "skills/suppa-entity-code/scripts/install-entity-code-guards.mjs"

10 },

11 "main": "dist/bin.js",

12 "files": [

13 "dist",

14 "skills",

15 "README.md",

16 "LICENSE"

17 ],

18 "engines": {

19 "node": ">=18"

20 },

21 "scripts": {

22 "build": "tsc",

23 "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",

24 "rebuild": "npm run clean && npm run build",

25 "start": "node dist/bin.js",

26 "dev": "tsc --watch",

27 "test": "node scripts/check-version-literals.mjs && vitest run",

28 "postinstall": "node skills/suppa-entity-code/scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 "test:watch": "vitest",

30 "prepublishOnly": "npm run rebuild && npm test",

31 "inspect": "npx @modelcontextprotocol/inspector node dist/bin.js",

32 "live:install": "node scripts/live-install.mjs",

33 "live:verify": "node scripts/verify-live-install.mjs",

34 "schema:gate": "node skills/suppa-entity-code/scripts/entity-code-guard.mjs --ci .",

35 "guards:install": "node skills/suppa-entity-code/scripts/install-entity-code-guards.mjs"

36 },

37 "keywords": [

38 "mcp",

39 "model-context-protocol",

40 "suppa",

41 "modern-expo",

42 "ai",

43 "llm",

44 "tools",

45 "claude",

46 "copilot",

47 "cursor"

48 ],

dist/tools/entityCode.jsView file

Lines 61-101javascript

61 .split("\\$")

62 .join("$");

63 }

64 catch {

65 return "";

66 }

dist/version.jsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/version.js: * node_modules holds; publishing a fix changes nothing until that client is import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs"; const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`; writeFileSync(tmp, `${JSON.stringify(cache, null, 2)}\n`, "utf-8");

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/version.jsView on unpkg

dist/auth.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/auth.js#virtual:normalized:round1View on unpkg

dist/auth.jsView file

•matchType = normalized_sha256 matchedPackage = suppa-mcp-2@1.31.1 matchedPath = dist/auth.js matchedIdentity = npm:c3VwcGEtbWNwLTI:1.31.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/auth.jsView on unpkg

dist/selfcheck.jsView file

•matchType = normalized_sha256 matchedPackage = suppa-mcp-2@1.31.1 matchedPath = dist/selfcheck.js matchedIdentity = npm:c3VwcGEtbWNwLTI:1.31.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/selfcheck.jsView on unpkg

dist/tools/files.jsView file

•matchType = normalized_sha256 matchedPackage = suppa-mcp-2@1.31.1 matchedPath = dist/tools/files.js matchedIdentity = npm:c3VwcGEtbWNwLTI:1.31.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/files.jsView on unpkg