muaddib-scanner 2.7.7 → 2.7.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "muaddib-scanner",
-  "version": "2.7.7",
+  "version": "2.7.8",
   "description": "Supply-chain threat detection & response for npm & PyPI/Python",
   "main": "src/index.js",
   "bin": {

package/src/index.js

@@ -555,18 +555,21 @@ async function run(targetPath, options = {}) {
     }
   }
 
-  // Read package name for benign package whitelist
+  // Read package name and dependencies for FP reduction heuristics
   let packageName = null;
+  let packageDeps = null;
   try {
     const pkgPath = path.join(targetPath, 'package.json');
     if (fs.existsSync(pkgPath)) {
-      packageName = JSON.parse(fs.readFileSync(pkgPath, 'utf8')).name || null;
+      const pkgData = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+      packageName = pkgData.name || null;
+      packageDeps = pkgData.dependencies || null;
     }
   } catch { /* graceful fallback */ }
 
   // FP reduction: legitimate frameworks produce high volumes of certain threat types.
   // A malware package typically has 1-3 occurrences, not dozens.
-  applyFPReductions(deduped, reachableFiles, packageName);
+  applyFPReductions(deduped, reachableFiles, packageName, packageDeps);
 
   // Intent coherence analysis: detect source→sink pairs within files
   // Pass targetPath for destination-aware SDK pattern detection

package/src/scoring.js

@@ -197,7 +197,7 @@ const FRAMEWORK_PROTO_RE = new RegExp(
   '^(' + FRAMEWORK_PROTOTYPES.join('|') + ')\\.prototype\\.'
 );
 
-function applyFPReductions(threats, reachableFiles, packageName) {
+function applyFPReductions(threats, reachableFiles, packageName, packageDeps) {
   // Count occurrences of each threat type (package-level, across all files)
   const typeCounts = {};
   for (const t of threats) {
@@ -304,6 +304,17 @@ function applyFPReductions(threats, reachableFiles, packageName) {
         t.unreachable = true;
       }
     }
+
+    // C2: MCP server awareness — legitimate MCP servers write to MCP config files.
+    // Downgrade mcp_config_injection to MEDIUM when @modelcontextprotocol/sdk is in dependencies.
+    // Only dependencies (not devDependencies) — a real MCP server must ship the SDK.
+    // High-confidence compound types stay untouched (lifecycle_shell_pipe, fetch_decrypt_exec, etc.)
+    if (t.type === 'mcp_config_injection' && t.severity === 'CRITICAL' &&
+        packageDeps && typeof packageDeps === 'object' &&
+        packageDeps['@modelcontextprotocol/sdk']) {
+      t.severity = 'MEDIUM';
+      t.mcpSdkDowngrade = true;
+    }
   }
 }