add-mcp@2.6.0

CAUTION

Publisher claims: "Add MCP servers to your favorite coding agents with a single command." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher neon-solutions · joined 0 days agoInstalls 725KLast detonated 2 h ago

Dispute verdict

Behavior trace

Honeypot run · 3 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

2.4sprocessdependency install exit 1

2.6sprocessexec /usr/bin/timeout

2.6sprocessexited 1: Node.js v22.23.4

2.6sclaimedno tools/list reply (exit 1)

2.6sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsdist/index.js:1038 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/chunk-JSTAEWMV.js:755 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/chunk-JSTAEWMV.js:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/chunk-JSTAEWMV.js:750 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/chunk-JSTAEWMV.js:748 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/chunk-JSTAEWMV.js:752 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/index.js:682 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Auto-update or dynamic fetch configurationdist/chunk-JSTAEWMV.js:1055 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

AST06

HIGH

Unicode escape sequence detecteddist/index.js:927 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

CRITICAL

Access to sensitive file pathsdist/index.js:1226 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packagedist/chunk-JSTAEWMV.js:1986 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Unicode escape sequence detecteddist/index.js:926 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

npx invocation of non-well-known packageREADME.md:20 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:147 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Auto-update or dynamic fetch configurationdist/chunk-JSTAEWMV.js:1038 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

AST06

HIGH

npx invocation of non-well-known packageREADME.md:44 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Auto-update or dynamic fetch configurationdist/chunk-JSTAEWMV.js:1058 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

AST06

HIGH

Auto-update or dynamic fetch configurationdist/chunk-JSTAEWMV.js:1072 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

AST06

CRITICAL

Access to sensitive file pathsdist/index.js:1040 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:14 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:150 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Auto-update or dynamic fetch configurationdist/chunk-JSTAEWMV.js:1036 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

AST06

HIGH

npx invocation of non-well-known packagedist/index.js:1909 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/index.js:1900 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/index.js:1906 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionREADME.md:89 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packagedist/index.js:1912 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/index.js:1903 · npx invocation of non-well-known package — may execute untrusted code

AST06