txamcp@4.0.5: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

txamcp@4.0.5: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

mcp-server.mjsView file

14L15: import { exec } from "child_process"; L16: import { promisify } from "util";

High

Child Process

Package source references child process execution.

mcp-server.mjsView on unpkg · L14

690const cmd = os.platform() === 'win32' L691: ? 'powershell -Command "Get-ChildItem -Path . -Filter *.sql -Recurse -Depth 3 -Name -ErrorAction SilentlyContinue"' L692: : 'find . -maxdepth 3 -name "*.sql"';

High

Shell

Package source references shell execution.

mcp-server.mjsView on unpkg · L690

21import { createRequire } from "module"; L22: const require = createRequire(import.meta.url); L23: const pkg = require("./package.json");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

mcp-server.mjsView on unpkg · L21

cli.js#virtual:normalized:round1View file

495const hubUrl = await getHubUrl(); L496: await fetch(`${hubUrl}/api/auth/cli/cancel`, { L497: method: "POST", ... L499: body: JSON.stringify({ request_id: request_id }), L500: signal: AbortSignal.timeout(2000) // Don"t hang on exit\n });\n } catch (e) { }\n process.exit(0);\n };\n process.on("SIGINT", handleAbort);\n\n ... L501: console.log(chalk.gray.italic(" Advanced AI Context Management Hub\n"));

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

cli.js#virtual:normalized:round1View on unpkg · L495

485const dots = ".".repeat(statusDots); L486: process.stdout.write(`\r ${chalk.cyan("⏳")} ${chalk.gray("Waiting for authorization" + dots.padEnd(3, " "))}`); L487: }, 500); ... L495: const hubUrl = await getHubUrl(); L496: await fetch(`${hubUrl}/api/auth/cli/cancel`, { L497: method: "POST", ... L499: body: JSON.stringify({ request_id: request_id }), L500: signal: AbortSignal.timeout(2000) // Don"t hang on exit\n });\n } catch (e) { }\n process.exit(0);\n };\n process.on("SIGINT", handleAbort);\n\n ... L501: console.log(chalk.gray.italic(" Advanced AI Context Management Hub\n"));

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

cli.js#virtual:normalized:round1View on unpkg · L485

485Trigger-reachable command-output exfiltration chain: manifest.bin -> cli.js L485: const dots = ".".repeat(statusDots); L486: process.stdout.write(`\r ${chalk.cyan("⏳")} ${chalk.gray("Waiting for authorization" + dots.padEnd(3, " "))}`); L487: }, 500); ... L495: const hubUrl = await getHubUrl(); L496: await fetch(`${hubUrl}/api/auth/cli/cancel`, { L497: method: "POST", ... L499: body: JSON.stringify({ request_id: request_id }), L500: signal: AbortSignal.timeout(2000) // Don"t hang on exit\n });\n } catch (e) { }\n process.exit(0);\n };\n process.on("SIGINT", handleAbort);\n\n ... L501: console.log(chalk.gray.italic(" Advanced AI Context Management Hub\n"));

cli.jsView file

834try { L835: execSync("npm install -g txamcp@latest", { stdio: "inherit" }); L836: log.success("TXAMCP updated successfully!");

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

cli.jsView on unpkg · L834

txamcp-vscode-4.0.5.vsixView file

•path = txamcp-vscode-4.0.5.vsix kind = high_entropy_blob sizeBytes = 574659 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

txamcp-vscode-4.0.5.vsixView on unpkg

•path = txamcp-vscode-4.0.5.vsix kind = compressed_blob sizeBytes = 574659 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

txamcp-vscode-4.0.5.vsixView on unpkg

•path = txamcp-vscode-4.0.5.vsix kind = nested_archive_needs_inspection sizeBytes = 574659 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

txamcp-vscode-4.0.5.vsixView on unpkg

Source & flagged code

13 flagged

package.jsonView file

Lines 2-42json

2 "name": "txamcp",

3 "version": "4.0.5",

4 "description": "Txa_MCP - Professional MCP Server & CLI for Local AI Context Management",

5 "type": "module",

6 "main": "mcp-server.mjs",

7 "bin": {

8 "txa": "cli.js"

9 },

10 "files": [

11 "cli.js",

12 "mcp-server.mjs",

13 "instructions.md",

14 "postinstall.mjs",

15 "README.md",

16 "LICENSE",

17 "CHANGELOG.md",

18 "*.vsix"

19 ],

20 "scripts": {

21 "start": "node mcp-server.mjs",

22 "postinstall": "node postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L22

23 },

24 "keywords": [

25 "mcp",

26 "txamcp",

27 "txa-mcp",

28 "ai",

29 "context",

30 "cli",

31 "ide",

32 "trae",

33 "cursor",

34 "windsurf"

35 ],

36 "author": "TXA Hub Team",

37 "license": "MIT",

38 "homepage": "https://txahub.click",

39 "dependencies": {

40 "@modelcontextprotocol/sdk": "^1.6.0",

41 "boxen": "^8.0.1",

42 "chalk": "^5.3.0",

mcp-server.mjsView file

Lines 1-41javascript

1import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

2import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

3import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";

4import { z } from "zod";

cli.js#virtual:normalized:round1View file

495const hubUrl = await getHubUrl(); L496: await fetch(`${hubUrl}/api/auth/cli/cancel`, { L497: method: "POST", ... L499: body: JSON.stringify({ request_id: request_id }), L500: signal: AbortSignal.timeout(2000) // Don"t hang on exit\n });\n } catch (e) { }\n process.exit(0);\n };\n process.on("SIGINT", handleAbort);\n\n ... L501: console.log(chalk.gray.italic(" Advanced AI Context Management Hub\n"));

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

cli.js#virtual:normalized:round1View on unpkg · L495

485const dots = ".".repeat(statusDots); L486: process.stdout.write(`\r ${chalk.cyan("⏳")} ${chalk.gray("Waiting for authorization" + dots.padEnd(3, " "))}`); L487: }, 500); ... L495: const hubUrl = await getHubUrl(); L496: await fetch(`${hubUrl}/api/auth/cli/cancel`, { L497: method: "POST", ... L499: body: JSON.stringify({ request_id: request_id }), L500: signal: AbortSignal.timeout(2000) // Don"t hang on exit\n });\n } catch (e) { }\n process.exit(0);\n };\n process.on("SIGINT", handleAbort);\n\n ... L501: console.log(chalk.gray.italic(" Advanced AI Context Management Hub\n"));

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

cli.js#virtual:normalized:round1View on unpkg · L485

485Trigger-reachable command-output exfiltration chain: manifest.bin -> cli.js L485: const dots = ".".repeat(statusDots); L486: process.stdout.write(`\r ${chalk.cyan("⏳")} ${chalk.gray("Waiting for authorization" + dots.padEnd(3, " "))}`); L487: }, 500); ... L495: const hubUrl = await getHubUrl(); L496: await fetch(`${hubUrl}/api/auth/cli/cancel`, { L497: method: "POST", ... L499: body: JSON.stringify({ request_id: request_id }), L500: signal: AbortSignal.timeout(2000) // Don"t hang on exit\n });\n } catch (e) { }\n process.exit(0);\n };\n process.on("SIGINT", handleAbort);\n\n ... L501: console.log(chalk.gray.italic(" Advanced AI Context Management Hub\n"));

cli.jsView file

834try { L835: execSync("npm install -g txamcp@latest", { stdio: "inherit" }); L836: log.success("TXAMCP updated successfully!");

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

cli.jsView on unpkg · L834

txamcp-vscode-4.0.5.vsixView file

•path = txamcp-vscode-4.0.5.vsix kind = high_entropy_blob sizeBytes = 574659 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

txamcp-vscode-4.0.5.vsixView on unpkg

•path = txamcp-vscode-4.0.5.vsix kind = compressed_blob sizeBytes = 574659 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

txamcp-vscode-4.0.5.vsixView on unpkg

•path = txamcp-vscode-4.0.5.vsix kind = nested_archive_needs_inspection sizeBytes = 574659 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

txamcp-vscode-4.0.5.vsixView on unpkg

Lines 670-710javascript

670 allow_external_access: z.boolean().optional().describe("Set to true to allow writing files outside the project root. User must explicitly approve this action.")

671 },

672 handler: async ({ filePath, content, allow_external_access }) => {

673 const abs = getAbsolutePathForWrite(filePath, allow_external_access || false);

674 await fs.mkdir(path.dirname(abs), { recursive: true });

675 await fs.writeFile(abs, content, "utf-8");

676 return { content: [{ type: "text", text: `✅ Successfully wrote to ${filePath}.\n\n--- FILE CONTENT ---\n${content}` }] };

677 }

678 },

679 "inspect_database": {

680 description: "Automatically analyze DB schema from .sql files or project config.",

681 schema: {

682 dbFile: z.string().optional().describe("Specific SQL file (optional)")

683 },

684 handler: async ({ dbFile }) => {

685 let results = "--- Database Schema Analysis ---\n";

686 let sqlFiles;

687 if (dbFile) {

688 sqlFiles = [getAbsolutePath(dbFile)];

689 } else {

690 const cmd = os.platform() === 'win32'

691 ? 'powershell -Command "Get-ChildItem -Path . -Filter *.sql -Recurse -Depth 3 -Name -ErrorAction SilentlyContinue"'

692 : 'find . -maxdepth 3 -name "*.sql"';

High

Shell

Package source references shell execution.

mcp-server.mjsView on unpkg · L690

693 sqlFiles = await execPromise(cmd, { cwd: CURRENT_PROJECT_ROOT })

694 .then(r => r.stdout.split('\n').map(f => f.trim()).filter(Boolean).map(f => path.join(CURRENT_PROJECT_ROOT, f)))

695 .catch(() => []);

696 }

697 for (const file of sqlFiles) {

698 if (!file.trim() || !existsSync(file)) continue;

699 const content = await fs.readFile(file, "utf-8");

700 const tables = [];

701 const regex = /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?([`"'\w\.\[\]\-]+)/gi;

702 let match;

703 while ((match = regex.exec(content)) !== null) {

704 let tableName = match[1].replace(/[`"'\s\[\]]/g, '');

705 if (tableName.includes('.')) {

706 tableName = tableName.split('.').pop();

707 }

708 tables.push(tableName);

709 }

710 results += `\nFile: ${path.basename(file)}\nTables found: ${tables.join(', ') || "None"}\n`;