Loading npm security reports…
trace-mcp@3.34.1: Manual Review npm security report (Allow) | LPM Firewall
Allowed — no malicious behavior detected
No malicious behavior detected. 35 low-signal pattern(s) reviewed.
trace-mcp@3.34.1 ⚠ Under review Framework-aware code intelligence MCP server — 88 framework integrations, 81 languages, 72.7% fewer input tokens to review a pull request, comprehension at parity
scanned 25d ago · by lpm-firewall-ai Inspected install and hint sites show first-party daemon and launcher setup plus local path constants, not a concrete foreign-agent or exfiltration attack. The mandatory clean citation list exceeds the eight-citation cap, so the review cannot be closed as clean.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
npm postinstall, plus explicit bench or CLI commands.
Impact
No credential theft, foreign agent-config hijack, or remote payload chain was confirmed in the inspected install path. The clean decision stays unresolved only because citation coverage cannot be completed.
Mechanism
Postinstall writes ~/.trace launcher state and may refresh the package LaunchAgent and signed app bundle. Hinted agent paths are configuration constants and local benchmark reads.
AI rationale
Inspected install and hint sites show first-party daemon and launcher setup plus local path constants, not a concrete foreign-agent or exfiltration attack. The mandatory clean citation list exceeds the eight-citation cap, so the review cannot be closed as clean.
public snapshot AI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.
AI review observations
npm postinstall runs preflight-native, postinstall-app, and postinstall-control-plane, which set up this package's own ~/.trace launcher and macOS LaunchAgent rather than a foreign agent config. Hinted agent paths in dist/extract-worker.js and dist/proxy.js are home-directory constants such as .claude.json and .codex. scripts/state-trace-replay.ts and scripts/bench-name-tokens.ts only read local session or repo files when those bench commands are run. A clean verdict would need 16 distinct citations, but the citation limit is 8, so the review cannot be finalized as clean. Evidence against
No self-dependency on trace-mcp and no preinstall hook. Postinstall documents TRACE_MCP_NO_POSTINSTALL and ephemeral-path skips, and the app updater defaults to the package GitHub repo with a checksum check. Plugin manifests under .claude-plugin and .codex-plugin ship inside the package and were not found being copied into user agent settings by the postinstall scripts. 26 flagged · loading source • scripts.postinstall = node scripts/preflight-native.mjs && node scripts/postinstall-app.mjs && node scripts/postinstall-control-plane.mjs
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg • scripts.postinstall = node scripts/preflight-native.mjs && node scripts/postinstall-app.mjs && node scripts/postinstall-control-plane.mjs
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg 27621 // src/daemon/lifecycle.ts
L27622: import { execSync, execFileSync as execFileSync2, spawn } from "child_process";
L27623: import fs12 from "fs";
20 High 9 Medium 6 Low
High Install Time Lifecycle Scripts package.json
High Child Process dist/proxy.js
High Shell dist/proxy.js
High Same File Env Network Execution scripts/capture-screenshots.mjs#virtual:normalized:round1
High Command Output Exfiltration scripts/capture-screenshots.mjs#virtual:normalized:round1
High Sandbox Evasion Gated Capability scripts/verify-upgrade-path.mjs
High Runtime Package Install scripts/record-wire-fixtures.ts
High Semantic Analysis Limited scripts/bench-index-throughput.ts#virtual:normalized:round1
High Known Malware Source Similarity scripts/capture-screenshots.mjs
High Known Malware Source Similarity scripts/verify-upgrade-path.mjs
Affected versions and remediation This report applies to trace-mcp@3.34.1 .
See all versions of trace-mcp for other recorded verdicts.
Review the evidence and your use of trace-mcp@3.34.1 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-09-27 22:32:43.416Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
62% Manual Review
AI assessment confidence
Package metadata npm Author Nikolai Vysotskyi
Maintainers nikolai-vysotskyi
Version 3.34.1
Latest on npm 3.38.0
Published Sep 27, 2026
License MIT
Dependencies 23
Integrity verified
Package size 29.2 MB
Files 151
Keywords mcp-server claude-code cursor ai-agents code-graph dependency-graph token-optimization mcp
DynamicRequire
EnvironmentVars
Eval
Filesystem
NativeBindings
Network
Shell
WebSocket
Supply chain HighEntropyStrings UrlStrings
Manifest No manifest risk signals triggered.
scanned 83 file(s), 5.02 MB of source, external domains: 127.0.0.1, analyticsdata.googleapis.com, api.dataforseo.com, api.github.com, cloud.langfuse.com, feross.org, github.com, json-schema.org, oauth2.googleapis.com, raw.githubusercontent.com, registry.npmjs.org, schema.org, trace-mcp.com, www.apple.com, www.googleapis.com, www.w3.org
Oversized source lightweight scan
dist/cli.js 12.6 MB file, sampled 256 KB
Filesystem Network EnvironmentVars HighEntropyStrings UrlStrings 127.0.0.1 feross.org github.com
dist/index.js 10.8 MB file, sampled 256 KB
Filesystem Crypto HighEntropyStrings UrlStrings feross.org github.com trace-mcp.com
dist/local-backend.js 10.8 MB file, sampled 256 KB
Filesystem EnvironmentVars Crypto HighEntropyStrings UrlStrings feross.org github.com trace-mcp.com
dist/snapshot-backend.js 10.8 MB file, sampled 256 KB
Filesystem EnvironmentVars Crypto HighEntropyStrings UrlStrings feross.org github.com trace-mcp.com
2474 function hasPreloadFlags() {
L2475: const execArgv = process.execArgv;
L2476: for (let i = 0; i < execArgv.length; i++) {
• matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = dist/proxy.js
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/proxy.js View on unpkg 2 import { createRequire as __tmcpCreateRequire } from 'node:module';
L3: const require = __tmcpCreateRequire(import.meta.url);
L4: var __create = Object.create;
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist/proxy.js View on unpkg · L2 1103 for (var i = 0; i < flen; ) {
L1104: if (f.charCodeAt(i) === 37 && i + 1 < flen) {
L1105: lastPos = lastPos > -1 ? lastPos : 0;
...
L1338: fsWriteSync = () => fs19.writeSync(this.fd, this._writingBuf);
L1339: fsWrite = () => fs19.write(this.fd, this._writingBuf, this.release);
L1340: } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
...
L1903:
L1904: // node_modules/.pnpm/thread-stream@4.0.0/node_modules/thread-stream/package.json
L1905: var require_package = __commonJS({
...
L1943: type: "git",
L1944: url: "git+https://github.com/mcollina/thread-stream.git"
L1945: },
Medium Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/proxy.js View on unpkg · L1103 scripts/capture-screenshots.mjs#virtual:normalized:round1 View file 390 // six grey placeholders is exactly the failure this pipeline exists to avoid.
L391: const dashboard = `http://127.0.0.1:${DEMO_DAEMON_PORT}/api/dashboard`;
L392: await fetch(`${dashboard}/refresh`, { method: "POST" });
...
L402: * The guard"s health comes from a heartbeat an attached agent session writes.\n * A capture has no agent, so without this the showcase screenshot ships a red\n * \"Not running\" ba...
L403: * policy") — the window comes up blank. Assigning `location.href` inside the\n * document keeps the app's own file origin, exactly as the main process does.\n */\nasync function na...
L404: return;
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
scripts/capture-screenshots.mjs#virtual:normalized:round1 View on unpkg · L390 390 // six grey placeholders is exactly the failure this pipeline exists to avoid.
L391: const dashboard = `http://127.0.0.1:${DEMO_DAEMON_PORT}/api/dashboard`;
L392: await fetch(`${dashboard}/refresh`, { method: "POST" });
...
L401: /**
L402: * The guard"s health comes from a heartbeat an attached agent session writes.\n * A capture has no agent, so without this the showcase screenshot ships a red\n * \"Not running\" ba...
L403: * policy") — the window comes up blank. Assigning `location.href` inside the\n * document keeps the app's own file origin, exactly as the main process does.\n */\nasync function na...
L404: return;
High Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
scripts/capture-screenshots.mjs#virtual:normalized:round1 View on unpkg · L390 25 L26: import { execFileSync } from 'node:child_process';
L27: import fs from 'node:fs';
...
L34:
L35: if (process.platform !== 'darwin') {
L36: console.log('skip: macOS only');
...
L48: const repoRoot = path.resolve(new URL('..', import.meta.url).pathname);
L49: const expected = JSON.parse(fs.readFileSync(path.join(repoRoot, 'package.json'), 'utf-8')).version;
L50:
...
L62: try {
L63: const res = await fetch(`https://api.github.com/repos/${REPO}/releases?per_page=10`, {
L64: headers: { 'User-Agent': 'trace-mcp' },
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
scripts/verify-upgrade-path.mjs View on unpkg · L25 • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/verify-upgrade-path.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/verify-upgrade-path.mjs View on unpkg 20 * Usage:
L21: * npx tsx scripts/record-wire-fixtures.ts [--project <root>] [--port <port>]
L22: *
...
L25: */
L26: import { spawn } from 'node:child_process';
L27: import fs from 'node:fs';
High Runtime Package Install
Package source invokes a package manager install command at runtime.
scripts/record-wire-fixtures.ts View on unpkg · L20 • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/record-wire-fixtures.ts
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/record-wire-fixtures.ts View on unpkg • path = hooks/trace-mcp-reindex.sh
kind = build_helper
sizeBytes = 8298
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
hooks/trace-mcp-reindex.sh View on unpkg • path = dist/snapshot-backend.js
kind = oversized_source_file
sizeBytes = 11310426
magicHex = [redacted]
Medium Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/snapshot-backend.js View on unpkg • path = dist/cli.js
kind = oversized_cli_entrypoint
sizeBytes = 13233493
magicHex = [redacted]
Medium Oversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/cli.js View on unpkg scripts/bench-index-throughput.ts#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
scripts/bench-index-throughput.ts#virtual:normalized:round1 View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/capture-screenshots.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/capture-screenshots.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/verify-win-update.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/verify-win-update.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/bench-session-scaling.ts
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/bench-session-scaling.ts View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/gen-readme-banner.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/gen-readme-banner.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/gen-sitemap.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/gen-sitemap.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/perf/daemon-query-alloc.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/perf/daemon-query-alloc.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/perf/daemon-serving-rss.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/perf/daemon-serving-rss.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/bench-name-tokens.ts
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/bench-name-tokens.ts View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/bench-pr-quality.ts
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/bench-pr-quality.ts View on unpkg High
Known Malware Source Similarity
scripts/verify-win-update.mjs
High Known Malware Source Similarity dist/proxy.js
High Known Malware Source Similarity scripts/bench-session-scaling.ts
High Known Malware Source Similarity scripts/gen-readme-banner.mjs
High Known Malware Source Similarity scripts/gen-sitemap.mjs
High Known Malware Source Similarity scripts/perf/daemon-query-alloc.mjs
High Known Malware Source Similarity scripts/perf/daemon-serving-rss.mjs
High Known Malware Source Similarity scripts/record-wire-fixtures.ts
High Known Malware Source Similarity scripts/bench-name-tokens.ts
High Known Malware Source Similarity scripts/bench-pr-quality.ts
Medium Ambiguous Install Lifecycle Script package.json
Medium Dynamic Require dist/proxy.js
Medium Install Persistence dist/proxy.js
Medium Ships Build Helper hooks/trace-mcp-reindex.sh
Medium Oversized Source File dist/snapshot-backend.js
Medium Oversized Cli Entrypoint dist/cli.js
Medium Structural Risk Force Deep Review
Low Non Install Lifecycle Scripts
Runtime surface package.json Entrypoints main → dist/index.js types → dist/index.d.ts bin → trace, trace-mcp
Runtime node >=22.0.0
Artifact 134 MB · 151 files 2 signature(s) · provenance
Install lifecycle postinstall prepare prepublishOnly
Behavioral surface ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem NativeBindings Network Shell WebSocket HighEntropyStrings UrlStrings Manifest: clean
26 flagged • scripts.postinstall = node scripts/preflight-native.mjs && node scripts/postinstall-app.mjs && node scripts/postinstall-control-plane.mjs
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg • scripts.postinstall = node scripts/preflight-native.mjs && node scripts/postinstall-app.mjs && node scripts/postinstall-control-plane.mjs
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg 27621 // src/daemon/lifecycle.ts
L27622: import { execSync, execFileSync as execFileSync2, spawn } from "child_process";
L27623: import fs12 from "fs";
2474 function hasPreloadFlags() {
L2475: const execArgv = process.execArgv;
L2476: for (let i = 0; i < execArgv.length; i++) {
• matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = dist/proxy.js
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/proxy.js View on unpkg 2 import { createRequire as __tmcpCreateRequire } from 'node:module';
L3: const require = __tmcpCreateRequire(import.meta.url);
L4: var __create = Object.create;
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist/proxy.js View on unpkg · L2 1103 for (var i = 0; i < flen; ) {
L1104: if (f.charCodeAt(i) === 37 && i + 1 < flen) {
L1105: lastPos = lastPos > -1 ? lastPos : 0;
...
L1338: fsWriteSync = () => fs19.writeSync(this.fd, this._writingBuf);
L1339: fsWrite = () => fs19.write(this.fd, this._writingBuf, this.release);
L1340: } else if (contentMode === void 0 || contentMode === kContentModeUtf8) {
...
L1903:
L1904: // node_modules/.pnpm/thread-stream@4.0.0/node_modules/thread-stream/package.json
L1905: var require_package = __commonJS({
...
L1943: type: "git",
L1944: url: "git+https://github.com/mcollina/thread-stream.git"
L1945: },
Medium Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/proxy.js View on unpkg · L1103 scripts/capture-screenshots.mjs#virtual:normalized:round1 View file 390 // six grey placeholders is exactly the failure this pipeline exists to avoid.
L391: const dashboard = `http://127.0.0.1:${DEMO_DAEMON_PORT}/api/dashboard`;
L392: await fetch(`${dashboard}/refresh`, { method: "POST" });
...
L402: * The guard"s health comes from a heartbeat an attached agent session writes.\n * A capture has no agent, so without this the showcase screenshot ships a red\n * \"Not running\" ba...
L403: * policy") — the window comes up blank. Assigning `location.href` inside the\n * document keeps the app's own file origin, exactly as the main process does.\n */\nasync function na...
L404: return;
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
scripts/capture-screenshots.mjs#virtual:normalized:round1 View on unpkg · L390 390 // six grey placeholders is exactly the failure this pipeline exists to avoid.
L391: const dashboard = `http://127.0.0.1:${DEMO_DAEMON_PORT}/api/dashboard`;
L392: await fetch(`${dashboard}/refresh`, { method: "POST" });
...
L401: /**
L402: * The guard"s health comes from a heartbeat an attached agent session writes.\n * A capture has no agent, so without this the showcase screenshot ships a red\n * \"Not running\" ba...
L403: * policy") — the window comes up blank. Assigning `location.href` inside the\n * document keeps the app's own file origin, exactly as the main process does.\n */\nasync function na...
L404: return;
High Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
scripts/capture-screenshots.mjs#virtual:normalized:round1 View on unpkg · L390 25 L26: import { execFileSync } from 'node:child_process';
L27: import fs from 'node:fs';
...
L34:
L35: if (process.platform !== 'darwin') {
L36: console.log('skip: macOS only');
...
L48: const repoRoot = path.resolve(new URL('..', import.meta.url).pathname);
L49: const expected = JSON.parse(fs.readFileSync(path.join(repoRoot, 'package.json'), 'utf-8')).version;
L50:
...
L62: try {
L63: const res = await fetch(`https://api.github.com/repos/${REPO}/releases?per_page=10`, {
L64: headers: { 'User-Agent': 'trace-mcp' },
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
scripts/verify-upgrade-path.mjs View on unpkg · L25 • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/verify-upgrade-path.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/verify-upgrade-path.mjs View on unpkg 20 * Usage:
L21: * npx tsx scripts/record-wire-fixtures.ts [--project <root>] [--port <port>]
L22: *
...
L25: */
L26: import { spawn } from 'node:child_process';
L27: import fs from 'node:fs';
High Runtime Package Install
Package source invokes a package manager install command at runtime.
scripts/record-wire-fixtures.ts View on unpkg · L20 • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/record-wire-fixtures.ts
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/record-wire-fixtures.ts View on unpkg • path = hooks/trace-mcp-reindex.sh
kind = build_helper
sizeBytes = 8298
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
hooks/trace-mcp-reindex.sh View on unpkg • path = dist/snapshot-backend.js
kind = oversized_source_file
sizeBytes = 11310426
magicHex = [redacted]
Medium Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/snapshot-backend.js View on unpkg • path = dist/cli.js
kind = oversized_cli_entrypoint
sizeBytes = 13233493
magicHex = [redacted]
Medium Oversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/cli.js View on unpkg scripts/bench-index-throughput.ts#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
scripts/bench-index-throughput.ts#virtual:normalized:round1 View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/capture-screenshots.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/capture-screenshots.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/verify-win-update.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/verify-win-update.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/bench-session-scaling.ts
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/bench-session-scaling.ts View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/gen-readme-banner.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/gen-readme-banner.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/gen-sitemap.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/gen-sitemap.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/perf/daemon-query-alloc.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/perf/daemon-query-alloc.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/perf/daemon-serving-rss.mjs
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/perf/daemon-serving-rss.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/bench-name-tokens.ts
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/bench-name-tokens.ts View on unpkg • matchType = normalized_sha256
matchedPackage = trace-mcp@3.25.1
matchedPath = scripts/bench-pr-quality.ts
matchedIdentity = npm:dHJhY2UtbWNw:3.25.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/bench-pr-quality.ts View on unpkg