ICUICU
critical

@kraiter/mcp-server

v0.3.2

MCP server for the Kraiter email platform

npmalopesFirst seen Feb 22, 2026

3

Total

1

Critical

2

High

0

Medium

Findings

unknown
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    3: import { Mailer } from "@kraiter/sdk";
    4: import { createServer } from "./server.js";
>>> 5: const apiKey = process.env.KRAITER_API_KEY;
    6: if (!apiKey) {
    7:     console.error("KRAITER_API_KEY environment variable is required");
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: J�b�'���ӭ�즊�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: J�b�'���ӭ�즊�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

Scan History

DateRiskFindings
Feb 23, 2026critical3
Feb 22, 2026critical3