github.com / Rudrasamadhiya

Rudrasamadhiya/expo-mcp-bridge

JavaScript·29 files·commit 6f03ca7·scanned 3d ago·cached ✓

40/100

SUSPICIOUS

Obfuscation or dynamic code paths detected. Intent unclear — review before running anything.

verdict accurate?

Created 7 days ago

Created in the last 7 days

CLI tool detected

threat-state: suspiciouslive

FINDINGS ░▒▓

criticalFunction() constructor detectednew Function() is equivalent to eval() and can execute arbitrary code strings.client/index.js

    try {
      fn = new Function('bridge', 'RN', 'return (' + code + '\n)');
    } catch (e) {
      fn = new Function('bridge', 'RN', code);

infoNative addon dependency"react-native" includes native compiled code. Native addons can hide behavior that static JS analysis cannot see.package.json+2

infoNative addon dependency"react-native-view-shot" includes native compiled code. Native addons can hide behavior that static JS analysis cannot see.package.json+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

13 files scanned @ 6f03ca7 | 10/26/2026 | heuristic scan — always review manually

risk by category

code execution5

network & exfiltration0

file system access0

obfuscation0

supply chain4

owasp / injection0

telemetry

files 13/29rules hit 3engine v7commit 6f03ca7

github

Rudrasamadhiya/expo-mcp-bridge

MCP server that lets Claude Code, Cursor, Antigravity and other AI agents see and control your Expo / React Native app on a real phone - no more pasting screenshots. Snapshot the screen, tap, type, scroll, screenshot, read logs and network. Works with Expo Go, iOS and Android.

JavaScript

10d

29 files

13 scanned(45%)

6f03ca7

architecture░▒▓

entry (2) flagged (1) pkg (12)

22 nodes · 24 edgesscroll to zoom · click node to jump to finding