devtools@0.52.0

CAUTION

Publisher claims: "MCP Server and CLI for IronBee DevTools" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher ironbee-ai · joined 0 days agoInstalls 37,175Last detonated 59 min ago

Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessexited 127: bash: line 1: patch-package: command not found

1.0sprocessdependency install exit 1

1.1sprocessexec /usr/bin/timeout

1.1sprocessexited 1: Node.js v22.23.4

1.1sclaimedno tools/list reply (exit 1)

1.1sprocessscript backend runs setup only

Static findings

HIGH

Outbound HTTP to raw IP addressdist/core-FO6VXHTA.js:2 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressREADME.md:962 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagedist/core-QW252NPB.js:6 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/cli/runner.js:167 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:587 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:207 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:204 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:203 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:202 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Privileged sudo commanddist/cli/runner.js:172 · Privileged sudo command — agent may execute with elevated privileges

AST05

MEDIUM

File type combined with upload actiondist/cli/runner.js:156 · File type combined with upload action — agent may exfiltrate local data files

AST07

LOW

Unpinned dependencyREADME.md:1122 · Unpinned dependency

AST06

MEDIUM

File type combined with upload actiondist/cli/runner.js:18 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/core-FO6VXHTA.js:2 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Hidden zero-width characters detecteddist/index.js:4 · Hidden zero-width characters detected — may conceal content

AST07

MEDIUM

URL using raw IP addressdist/core-FO6VXHTA.js:2 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actiondist/cli/runner.js:6 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addressdist/core-QW252NPB.js:20 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actiondist/cli/runner.js:9 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiondist/cli/runner.js:154 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiondist/daemon-server.js:1 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actiondist/index.js:4 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/index.js:4 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Outbound HTTP to raw IP addressdist/core-QW252NPB.js:20 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

File permission modification commandpackage.json:58 · File permission modification command — agent changes file ownership/permissions

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:1279 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressREADME.md:962 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/index.js:2 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressREADME.md:587 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actiondist/core-L3RPPD5C.js:1 · File type combined with upload action — agent may exfiltrate local data files

AST07