HighSupply chainBLWK-AI-003

An MCP server runs an unpinned package from a registry

What this means

An MCP server launched via an unpinned npx/uvx package.

How to fix it

Pin the MCP server to an exact version so it can't change without you knowing.

1. Replace the “@latest” or unversioned package with an exact version, for example @scope/pkg@1.2.3.
2. Check that the publisher is one you trust.
3. Update it deliberately, the way you update other dependencies.

Check it yourself

Run a scan and look for BLWK-AI-003 in the results:

bulwark scan
bulwark ai scan

Installed the standalone CLI package instead of the app? The command is bulwarkctl.

References

• MITRE ATT&CK T1195.001

Related checks

• A Python startup hook runs code in every Python process · BLWK-PERSIST-005
• Traces of the LiteLLM 1.107.0 credential stealer were found · BLWK-ROOTKIT-002
• An MCP server uses mcp-remote (critical command-injection ≤ 0.1.15) · BLWK-AI-004
• An MCP server launches via a shell interpreter · BLWK-AI-005
• An MCP server runs a privileged or host-mounting container · BLWK-AI-019