ICUICU
low

fetcher-mcp

v0.3.9

MCP server for fetching web content using Playwright browser

npmjaegerFirst seen Feb 22, 2026Source

7

Total

0

Critical

5

High

2

Medium

Findings

unknown
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: {��׏����(!��쵩e

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �������v��j)���'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ������� i�'�*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highSC-005Suspicious CommandsMedium ConfidenceLine 0

Node.js child process spawning

Detected by automated pattern matching (rule SC-005) with medium confidence. May be a false positive.

>>> 1: import { spawn } from "child_process";
    2: import { createRequire } from "module";
    3: import { existsSync } from "fs";
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: {��׏����(!��쵩e

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
mediumNS-003Network SuspiciousMedium ConfidenceLine 0

JavaScript fetch() call

Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.

    140:   - Supports intelligent extraction of main content and conversion to Markdown
    141:   - Supports the following parameters:
>>> 142:     - `url`: The URL of the web page to fetch (required parameter)
    143:     - `timeout`: Page loading timeout in milliseconds, default is 30000 (30 seconds)
    144:     - `waitUntil`: Specifies when navigation is considered complete, options: 'load', 'domcontentloaded', 'networkidle', 'commit', default is 'load'
Report false positive
mediumNS-003Network SuspiciousMedium ConfidenceLine 0

JavaScript fetch() call

Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.

    155:   - Returns combined results with clear separation between webpages
    156:   - Supports the following parameters:
>>> 157:     - `urls`: Array of URLs to fetch (required parameter)
    158:     - Other parameters are the same as `fetch_url`
    159: 
Report false positive

Scan History

DateRiskFindings
Feb 26, 2026low7
Feb 23, 2026low7
Feb 22, 2026low7