trace-mcp@3.5.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

trace-mcp@3.5.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/preflight-native.mjs && node scripts/postinstall-app.mjs && node scripts/postinstall-control-plane.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/preflight-native.mjs && node scripts/postinstall-app.mjs && node scripts/postinstall-control-plane.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/count-advertised-tools.mjsView file

13*/ L14: import { spawn } from 'node:child_process'; L15: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

scripts/count-advertised-tools.mjsView on unpkg · L13

scripts/capture-screenshots.mjs#virtual:normalized:round1View file

390// six grey placeholders is exactly the failure this pipeline exists to avoid. L391: const dashboard = `http://127.0.0.1:${DEMO_DAEMON_PORT}/api/dashboard`; L392: await fetch(`${dashboard}/refresh`, { method: "POST" }); ... L402: * The guard"s health comes from a heartbeat an attached agent session writes.\n * A capture has no agent, so without this the showcase screenshot ships a red\n * \"Not running\" ba... L403: * policy") — the window comes up blank. Assigning `location.href` inside the\n * document keeps the app's own file origin, exactly as the main process does.\n */\nasync function na... L404: return;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/capture-screenshots.mjs#virtual:normalized:round1View on unpkg · L390

390// six grey placeholders is exactly the failure this pipeline exists to avoid. L391: const dashboard = `http://127.0.0.1:${DEMO_DAEMON_PORT}/api/dashboard`; L392: await fetch(`${dashboard}/refresh`, { method: "POST" }); ... L401: /** L402: * The guard"s health comes from a heartbeat an attached agent session writes.\n * A capture has no agent, so without this the showcase screenshot ships a red\n * \"Not running\" ba... L403: * policy") — the window comes up blank. Assigning `location.href` inside the\n * document keeps the app's own file origin, exactly as the main process does.\n */\nasync function na... L404: return;

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

scripts/capture-screenshots.mjs#virtual:normalized:round1View on unpkg · L390

scripts/postinstall-app.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = trace-mcp@3.4.0 matchedIdentity = npm:dHJhY2UtbWNw:3.4.0 similarity = 0.929 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/postinstall-app.mjsView on unpkg

19* not destroy the working installation. L20: * - `unzip` is invoked with execFileSync (no shell) to avoid argument L21: * injection via asset names. ... L25: L26: import { execFileSync } from 'node:child_process'; L27: import crypto from 'node:crypto'; L28: import fs from 'node:fs'; L29: import http from 'node:http'; L30: import https from 'node:https'; ... L61: // have trace-mcp.app open), and avoid bouncing the developer's real daemon. L62: const API_BASE = process.env.TRACE_MCP_UPDATE_API_BASE || 'https://api.github.com'; L63: const PGREP_BIN = process.env.TRACE_MCP_PGREP_BIN || '/usr/bin/pgrep';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/postinstall-app.mjsView on unpkg · L19

hooks/trace-mcp-reindex.shView file

•path = hooks/trace-mcp-reindex.sh kind = build_helper sizeBytes = 5850 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/trace-mcp-reindex.shView on unpkg

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 10734468 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/index.jsView on unpkg

dist/cli.jsView file

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 12073387 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg

Source & flagged code

10 flagged

package.jsonView file

Lines 8-48json

8 "types": "dist/index.d.ts",

9 "bin": {

10 "trace-mcp": "dist/cli.js"

11 },

12 "scripts": {

13 "build": "tsup",

14 "dev": "tsup --watch",

15 "test": "vitest run",

16 "test:watch": "vitest",

17 "test:recall": "vitest run tests/recall-harness/recall.test.ts",

18 "test:recall:report": "tsx tests/recall-harness/runner.ts",

19 "typecheck": "tsc --noEmit",

20 "lint": "tsc --noEmit",

21 "format": "biome format --write",

22 "format:check": "biome format",

23 "biome:ci": "biome ci",

24 "serve": "tsx src/cli.ts serve",

25 "count:tools": "node scripts/count-advertised-tools.mjs",

26 "replay:check": "tsx scripts/replay-eval.ts",

27 "replay:update-baseline": "tsx scripts/replay-eval.ts --update-baseline",

28 "postinstall": "node scripts/preflight-native.mjs && node scripts/postinstall-app.mjs && node scripts/postinstall-control-plane.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 "prepublishOnly": "pnpm run build",

30 "prepare": "simple-git-hooks",

31 "docs:sitemap": "node scripts/gen-sitemap.mjs",

32 "docs:language-matrix": "tsx scripts/language-matrix.ts"

33 },

34 "simple-git-hooks": {

35 "pre-commit": "pnpm exec lint-staged"

36 },

37 "lint-staged": {

38 "*.{ts,tsx,js,jsx,mjs,cjs,json,jsonc,css}": [

39 "biome check --write --no-errors-on-unmatched"

40 ]

41 },

42 "engines": {

43 "node": ">=22.0.0"

44 },

45 "packageManager": "pnpm@10.33.0",

46 "license": "MIT",

47 "author": "Nikolai Vysotskyi",

48 "repository": {

scripts/count-advertised-tools.mjsView file

Lines 1-33javascript

1#!/usr/bin/env node

2/**

3 * Prints the tool surface THIS install serves — a real initialize + tools/list

4 * round-trip against the built server. Run after `pnpm run build`.

5 *

6 * TRA-268: this is not the number `docs/_data/counts.yml` quotes. Registration

7 * is gated on detected frameworks and on config, so the answer here changes

8 * with the repo and the machine (measured 150 / 165 / 172 across three

9 * environments). The documented number is derived statically instead — see

10 * tests/docs/tool-surface.ts.

scripts/capture-screenshots.mjs#virtual:normalized:round1View file

390// six grey placeholders is exactly the failure this pipeline exists to avoid. L391: const dashboard = `http://127.0.0.1:${DEMO_DAEMON_PORT}/api/dashboard`; L392: await fetch(`${dashboard}/refresh`, { method: "POST" }); ... L402: * The guard"s health comes from a heartbeat an attached agent session writes.\n * A capture has no agent, so without this the showcase screenshot ships a red\n * \"Not running\" ba... L403: * policy") — the window comes up blank. Assigning `location.href` inside the\n * document keeps the app's own file origin, exactly as the main process does.\n */\nasync function na... L404: return;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/capture-screenshots.mjs#virtual:normalized:round1View on unpkg · L390

390// six grey placeholders is exactly the failure this pipeline exists to avoid. L391: const dashboard = `http://127.0.0.1:${DEMO_DAEMON_PORT}/api/dashboard`; L392: await fetch(`${dashboard}/refresh`, { method: "POST" }); ... L401: /** L402: * The guard"s health comes from a heartbeat an attached agent session writes.\n * A capture has no agent, so without this the showcase screenshot ships a red\n * \"Not running\" ba... L403: * policy") — the window comes up blank. Assigning `location.href` inside the\n * document keeps the app's own file origin, exactly as the main process does.\n */\nasync function na... L404: return;

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

scripts/capture-screenshots.mjs#virtual:normalized:round1View on unpkg · L390

scripts/postinstall-app.mjsView file

Lines 1-39javascript

1#!/usr/bin/env node

2

3/**

4 * postinstall hook for `npm install -g trace-mcp`.

5 * If the Electron menu bar app is already installed in ~/Applications/,

6 * re-download the latest release zip and replace it — so `npm update -g`

7 * automatically keeps the GUI app in sync.

8 *

9 * Hardening:

10 * - TRACE_MCP_NO_AUTO_UPDATE=1 skips the update entirely.

11 * - TRACE_MCP_APP_RUNNING=1, set by the app on the install it spawns itself,

hooks/trace-mcp-reindex.shView file

•path = hooks/trace-mcp-reindex.sh kind = build_helper sizeBytes = 5850 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/trace-mcp-reindex.shView on unpkg

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 10734468 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/index.jsView on unpkg

dist/cli.jsView file

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 12073387 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg