Is postcss safe to use?

postcss has a security risk score of 100/100 (CRITICAL risk). Our security analysis detected 172 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of postcss?

Based on our automated security analysis, postcss presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "postcss" on MCP Registry Safe to Install?

ai · mcp · v8.5.8

Tool for transforming styles with JS plugins

Risk Assessment

Analyzed

100

out of 100

CRITICAL

172 security findings detected across all analyzers

MCP server analyzed for tool poisoning, prompt injection, and data exfiltration

Severity Breakdown

Critical

High

Medium

Low

Info

Finding Categories

Malware Signatures

Secrets

IoC Indicators

YARA Rules Matched

8 rules(33 hits)

postinstall obfuscation postinstall file download credential env files postinstall file manipulation postinstall environment access postinstall crypto operations postinstall network communication postinstall system command

MCP Server Analysis

MCP servers expose tools and resources to AI assistants. Unlike browser extensions, they run as standalone processes with direct system access. Tool definitions are analyzed for prompt injection, data exfiltration, and tool poisoning patterns.

About This Extension

Tool for transforming styles with JS plugins

Detailed Findings

99 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

Strings

All Indicators · 73

Domain

detected Domain: pico.green

XIOC detected Domain: pico.green

extracted_from_files

Domain

detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain

detected Domain: inputhydrated.map

XIOC detected Domain: inputhydrated.map

extracted_from_files

Domain

detected Domain: media.name

XIOC detected Domain: media.name

extracted_from_files

Domain

detected Domain: stylelint.io

XIOC detected Domain: stylelint.io

extracted_from_files

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

detected Domain: en.wikipedia.org

XIOC detected Domain: en.wikipedia.org

extracted_from_files

Domain

detected Domain: evilmartians.com

XIOC detected Domain: evilmartians.com

extracted_from_files

Domain

detected Domain: cdn.evilmartians.com

XIOC detected Domain: cdn.evilmartians.com

extracted_from_files

Domain

detected Domain: sitnik.ru

XIOC detected Domain: sitnik.ru

extracted_from_files

URL

detected URL: https://postcss.org/

XIOC detected URL: https://postcss.org/

extracted_from_files

URL

detected URL: https://github.com/postcss/postcss/issues

XIOC detected URL: https://github.com/postcss/postcss/issues

extracted_from_files

URL

detected URL: https://developer.mozilla.org/en-US/docs/Web/CSS/important)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/CSS/important)

extracted_from_files

URL

detected URL: https://github.com/postcss/postcss/pull/1879

XIOC detected URL: https://github.com/postcss/postcss/pull/1879

extracted_from_files

URL

detected URL: https://evilmartians.com/chronicles/postcss-8-plugin-migration'

XIOC detected URL: https://evilmartians.com/chronicles/postcss-8-plugin-migration'

extracted_from_files

URL

detected URL: https://www.w3ctech.com/topic/2226'

XIOC detected URL: https://www.w3ctech.com/topic/2226'

extracted_from_files

URL

detected URL: https://opencollective.com/postcss/

XIOC detected URL: https://opencollective.com/postcss/

extracted_from_files

URL

detected URL: https://tidelift.com/funding/github/npm/postcss

XIOC detected URL: https://tidelift.com/funding/github/npm/postcss

extracted_from_files

Domain

detected Domain: node.nodes.map

XIOC detected Domain: node.nodes.map

extracted_from_files

URL

detected URL: https://evilmartians.com/?utm_source=postcss

XIOC detected URL: https://evilmartians.com/?utm_source=postcss

extracted_from_files

URL

detected URL: https://github.com/postcss/autoprefixer

XIOC detected URL: https://github.com/postcss/autoprefixer

extracted_from_files

Domain

detected Domain: postcss.org

XIOC detected Domain: postcss.org

extracted_from_files

URL

detected URL: https://github.com/postcss/postcss#plugins

XIOC detected URL: https://github.com/postcss/postcss#plugins

extracted_from_files

URL

detected URL: https://postcss.org/)**.

XIOC detected URL: https://postcss.org/)**.

extracted_from_files

URL

detected URL: https://developer.mozilla.org/en-US/docs/Web/CSS/Comments)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/CSS/Comments)

extracted_from_files

URL

detected URL: https://developer.mozilla.org/en-US/docs/Web/CSS/Syntax#css_declarations)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/CSS/Syntax#css_declarations)

extracted_from_files

Domain

detected Domain: opencollective.com

XIOC detected Domain: opencollective.com

extracted_from_files

Domain

detected Domain: tidelift.com

XIOC detected Domain: tidelift.com

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL

detected URL: https://postcss.org/logo.svg

XIOC detected URL: https://postcss.org/logo.svg

extracted_from_files

URL

detected URL: https://cdn.evilmartians.com/badges/logo-no-label.svg

XIOC detected URL: https://cdn.evilmartians.com/badges/logo-no-label.svg

extracted_from_files

URL

detected URL: https://evilmartians.com/devtools?utm_source=postcss&utm_campaign=devtools-button&utm_medium=github

XIOC detected URL: https://evilmartians.com/devtools?utm_source=postcss&utm_campaign=devtools-button&utm_medium=github

extracted_from_files

URL

detected URL: https://en.wikipedia.org/wiki/Abstract_syntax_tree

XIOC detected URL: https://en.wikipedia.org/wiki/Abstract_syntax_tree

extracted_from_files

Domain

detected Domain: opts.to

XIOC detected Domain: opts.to

extracted_from_files

Domain

detected Domain: result.map

XIOC detected Domain: result.map

extracted_from_files

Domain

detected Domain: www.w3ctech.com

XIOC detected Domain: www.w3ctech.com

extracted_from_files

Domain

detected Domain: root.input.map

XIOC detected Domain: root.input.map

extracted_from_files

Domain

detected Domain: result.opts.to

XIOC detected Domain: result.opts.to

extracted_from_files

Domain

detected Domain: module.exports.my

XIOC detected Domain: module.exports.my

extracted_from_files

Domain

detected Domain: opts.fast

XIOC detected Domain: opts.fast

extracted_from_files

Domain

detected Domain: atrule.name

XIOC detected Domain: atrule.name

extracted_from_files

Domain

detected Domain: comment.next

XIOC detected Domain: comment.next

extracted_from_files

Domain

detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain

detected Domain: value.map

XIOC detected Domain: value.map

extracted_from_files

Domain

detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain

detected Domain: node.name

XIOC detected Domain: node.name

extracted_from_files

Domain

detected Domain: firstspaces.map

XIOC detected Domain: firstspaces.map

extracted_from_files

Domain

detected Domain: this.result.map

XIOC detected Domain: this.result.map

extracted_from_files

Domain

detected Domain: visit.events

XIOC detected Domain: visit.events

extracted_from_files

Domain

detected Domain: list.space

XIOC detected Domain: list.space

extracted_from_files

Domain

detected Domain: this.opts.to

XIOC detected Domain: this.opts.to

extracted_from_files

Domain

detected Domain: this.opts.map

XIOC detected Domain: this.opts.map

extracted_from_files

Domain

detected Domain: node.source.input.map

XIOC detected Domain: node.source.input.map

extracted_from_files

Domain

detected Domain: input.map

XIOC detected Domain: input.map

extracted_from_files

Domain

detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

URL

detected URL: https://stylelint.io/

XIOC detected URL: https://stylelint.io/

extracted_from_files

Domain

detected Domain: css.map

XIOC detected Domain: css.map

extracted_from_files

Domain

detected Domain: opts.map

XIOC detected Domain: opts.map

extracted_from_files

Domain

detected Domain: this.processor.plugins.map

XIOC detected Domain: this.processor.plugins.map

extracted_from_files

Domain

detected Domain: root.nodes.map

XIOC detected Domain: root.nodes.map

extracted_from_files

Domain

detected Domain: this.result.root.nodes.map

XIOC detected Domain: this.result.root.nodes.map

extracted_from_files

Domain

detected Domain: child.name

XIOC detected Domain: child.name

extracted_from_files

Domain

detected Domain: error.name

XIOC detected Domain: error.name

extracted_from_files

Domain

detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain

detected Domain: json.map

XIOC detected Domain: json.map

extracted_from_files

Domain

detected Domain: nodes.name

XIOC detected Domain: nodes.name

extracted_from_files

Domain

detected Domain: json.nodes.map

XIOC detected Domain: json.nodes.map

extracted_from_files

Domain

detected Domain: root.source.input.id

XIOC detected Domain: root.source.input.id

extracted_from_files

Domain

detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

Domain

detected Domain: rule.name

XIOC detected Domain: rule.name

extracted_from_files

Domain

detected Domain: nodes.map

XIOC detected Domain: nodes.map

extracted_from_files

Domain

detected Domain: args.map

XIOC detected Domain: args.map

extracted_from_files

URL

detected URL: https://github.com/sponsors/ai

XIOC detected URL: https://github.com/sponsors/ai

extracted_from_files

Security Analysis Summary

Security Analysis Overview

postcss is a mcp extension published by ai. Version 8.5.8 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 172 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

High: 41 finding(s)
Medium: 76 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

postcss is published by ai on the mcp marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

@mikey-semy/plane-mcp

mikey-semy

CRITICAL

@nitrostack/core

abhishekpanditoff

CRITICAL

@koneksi/mcp-server

alvinreyes

CRITICAL

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

MCP Server Analysis

About This Extension

Detailed Findings

MCP-TOOL-CREDENTIAL-ACCESS-lib/no-work-result.js-114

MCP-TOOL-CREDENTIAL-ACCESS-lib/lazy-result.js-218

MCP-TOOL-FILESYSTEM-ACCESS-lib/result.d.ts-87

MCP-TOOL-CREDENTIAL-ACCESS-lib/postcss.js-41

MCP-TOOL-CREDENTIAL-ACCESS-lib/processor.js-30

MCP-TOOL-CREDENTIAL-ACCESS-lib/lazy-result.js-427

MCP-TOOL-CREDENTIAL-ACCESS-lib/css-syntax-error.d.ts-227

MCP-TOOL-CREDENTIAL-ACCESS-lib/parse.js-13

MCP-TOOL-FILESYSTEM-ACCESS-lib/previous-map.js-89

MCP-TOOL-FILESYSTEM-ACCESS-lib/previous-map.js-3

MCP-TOOL-FILESYSTEM-ACCESS-lib/previous-map.js-3

HASH-a8fb10fd8c7bc7d9

HASH-6df35bac40d4c449

HASH-c4630ac8b89cb317

HASH-f66f02fde48389fe

HASH-8314c843f5dfa922

HASH-d4f628a47b16f894

HASH-674385438f42526f

HASH-299821a7481d314d

HASH-2a771d907aebf939

HASH-27f1eb6cc633f394

HASH-6d6b73a3f57b12ae

HASH-a4cfc9d293a44d9d

HASH-7662c5ad1fd5f97a

HASH-c65ca21d7002bdb4

HASH-5087cfda6c555ac5

HASH-0146fd6262c3fd3d

HASH-70c2cb19c0c42061

HASH-904b4bb371539a63

HASH-c8fc655c2c4bafc1

HASH-e221bd7d2af744df

HASH-057caa4908714fc3

HASH-57ea19c2e6ba094d

HASH-80dd2f6f88793bd9

HASH-be5a7ff3b47f7e55

HASH-c9b467ea59b86bd2

HASH-cba81ec9ae7bc31a

HASH-0f8aaa013a910e14

HASH-986ebc2d661a3e93

HASH-1a93f36ecdb60a95

HASH-6a4da742485d5c2e

HASH-99229cdda200513f

HASH-90c2bd9a3e72fe08

HASH-2ccb78406c7a45aa

HASH-5683ff69eeb8e773

HASH-478a5d26690c755f

HASH-b4239438538d4118

HASH-eb8ab8b9648d400e

HASH-fb29fa5e5432989b

HASH-a8122fe390a2a987

HASH-4442c5ccd2c9e03c

HASH-32ccf680084ad8ab

HASH-216ca23a33b1a014

HASH-03da5503293daa62

HASH-8c654c17c334c7c1

HASH-c29cb2393a49240b

HASH-7965dc3c7648e2a7

HASH-183f480885db5caa

HASH-feccbc87472d5d1c

HASH-89f8e241c60cffd2

HASH-a969d1ec8a5025c0

HASH-a0544b3c8b70b2f3

HASH-c65f892497d017eb

HASH-ad193f61ba708e01

HASH-33b932bda8f304e9

HASH-66bf461dbd984702

YARA Rule Matches

postinstall obfuscation

postinstall file download

credential env files

postinstall file manipulation

postinstall environment access

postinstall crypto operations