cli@1.0.134

CAUTION

Publisher claims: "Cargo, the go-to-market platform, from your terminal or coding agent: find and verify work emails, enrich companies and contacts, score leads and sync them to your CRM (HubSpot, Salesforce) across 130+ integrations, run plays and workflows, and serve it a" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher cargo-ai · joined 3 days agoInstalls 26,058Last detonated 59 min ago

Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.9sprocessdependency install exit 1

1.0sprocessexec /usr/bin/timeout

1.0sprocessexited 1: Node.js v22.23.4

1.0sclaimedno tools/list reply (exit 1)

1.0sprocessscript backend runs setup only

Static findings

HIGH

Access to sensitive file pathsbuild/commands/auth/index.js:63 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:48 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsbuild/commands/auth/index.js:204 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressREADME.md:133 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathsbuild/commands/hosting/app.js:91 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Pipe-to-shell patternbuild/utils/prompt.js:4 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:125 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathsbuild/commands/hosting/app.js:163 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packagebuild/agentSkills.js:35 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsbuild/commands/hosting/app.js:72 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressbuild/commands/auth/index.js:47 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagebuild/commands/doctor.js:56 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsbuild/commands/hosting/app.js:73 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:184 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressbuild/commands/auth/agentId.js:17 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagebuild/agentSkills.js:20 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressbuild/commands/auth/agentId.js:307 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressbuild/commands/auth/index.js:50 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:267 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagebuild/agentSkills.js:36 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagebuild/agentSkills.d.ts:20 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

URL using raw IP addressbuild/commands/auth/index.js:47 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressbuild/commands/auth/agentId.js:307 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressREADME.md:125 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressbuild/commands/auth/index.js:50 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionbuild/commands/ai/message.js:19 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packagebuild/index.js:60 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagebuild/index.js:55 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

Remote installer piped to shellbuild/utils/prompt.js:4 · Remote installer piped to shell

AST07

LOW

Unpinned dependencybuild/version.js:10 · Unpinned dependency

AST06

MEDIUM

URL using raw IP addressbuild/commands/auth/agentId.js:17 · URL using raw IP address — may bypass domain-based filtering

AST07

LOW

Unpinned dependencybuild/version.d.ts:1 · Unpinned dependency

AST06

HIGH

Access to sensitive file pathsbuild/config.js:5 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressREADME.md:133 · URL using raw IP address — may bypass domain-based filtering

AST07