registry / suppa-mcp-2 / 1.42.6
suppa-mcp-2@1.42.6
MCP server for the Suppa platform (modern.suppa.me) — Tasks, Docs/Pages, Entities & Schema, Forms, Automations, and file attachments, with multi-tenant Google auth. Node port of PyPI suppa-mcp.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe postinstall automatically changes project-level agent configuration when its Suppa project checks pass, creating a real lifecycle risk. Its bundled guard is schema-focused and locally executed, so the evidence supports a warning rather than a malicious verdict.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package from a non-CI, non-global Suppa application project.
Impact
Agent behavior in the project is altered for schema-related work; no concrete malicious action is established.
Mechanism
The postinstall invokes the package’s installer, which updates Claude settings and may add managed sections to AGENTS.md and CLAUDE.md; the hooks run the bundled schema guard.
AI rationale
The postinstall automatically changes project-level agent configuration when its Suppa project checks pass, creating a real lifecycle risk. Its bundled guard is schema-focused and locally executed, so the evidence supports a warning rather than a malicious verdict.
Evidence
package.jsonskills/suppa-entity-code/scripts/postinstall.mjsskills/suppa-entity-code/scripts/install-entity-code-guards.mjsskills/suppa-entity-code/scripts/entity-code-guard.mjs.claude/settings.jsonAGENTS.mdCLAUDE.md
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest runs the entity guard setup from an npm postinstall hook.
- The setup skips CI and global installs, and requires the invoking project to contain a Suppa dependency or schema code.
- The installer targets the project’s Claude settings and adds hooks for tool writes and stops.
- The installer can also add managed sections to AGENTS.md and CLAUDE.md.
- The hook handler filters its intervention to Suppa schema filenames.
Evidence against
- The installed hook runs code shipped in this package and is scoped to Suppa schema files.
- The postinstall has environment and project checks, but it still changes agent configuration without affirmative opt-in when those checks pass.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node skills/suppa-entity-code/scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node skills/suppa-entity-code/scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgskills/suppa-form-v2/scripts/vue-compiler-diagnostics.mjsView file
9`,-1),e.hoists.length)){let f=[At,Ct,Xe,Rt,Cn].filter(h=>p.includes(h)).map(Wn).join(", ");i(`const { ${f} } = _Vue
L10: `,-1)}Ni(e.hoists,t),r(),i("return ")}function Et(e,t,{helper:n,push:s,newline:i,isTS:r}){let o=n(t==="filter"?Pt:t==="component"?Dt:Lt);for(let a=0;a<e.length;a++){let l=e[a],c=l....
L11: /*! Bundled license information:
Low
Findings
6 High5 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighEntrypoint Foreign Package Code Overwritedist/version.js
HighSandbox Evasion Gated Capabilitydist/config.js
HighSemantic Analysis Limiteddist/selfcheck.js#virtual:normalized:round1
HighKnown Malware Source Similarityskills/suppa-entity-code/scripts/validate-suppa-schema.mjs
HighKnown Malware Source Similaritydist/selfcheck.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/tools/entityCode.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
Affected versions and remediation
This report applies to suppa-mcp-2@1.42.6.
See all versions of suppa-mcp-2 for other recorded verdicts.
- Review the evidence and your use of suppa-mcp-2@1.42.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.