brave@2.1.4

CAUTION

Publisher claims: "Search the Web for pages, images, news, videos, and more using the Brave Search API." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher brave · joined 0 days agoInstalls 0Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathssrc/config.test.ts:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsREADME.md:416 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsREADME.md:439 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/config.test.ts:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/config.test.ts:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/config.ts:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/config.ts:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/config.test.ts:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/config.test.ts:101 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressREADME.md:429 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:274 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:225 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathssrc/config.ts:64 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/config.ts:60 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/protocols/http.test.ts:242 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:318 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:245 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:427 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Access to sensitive file pathssrc/config.ts:58 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:232 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addresspackage.json:37 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

File permission modification commandpackage.json:29 · File permission modification command — agent changes file ownership/permissions

AST05

MEDIUM

URL using raw IP addresssrc/protocols/http.test.ts:64 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addresssrc/protocols/http.test.ts:64 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:245 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressREADME.md:429 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressREADME.md:427 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addresspackage.json:37 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07