hlims-mcp@1.0.0

VERIFIED

Publisher claims: "HLIMS Agent MCP Server - stdio proxy for remote HLIMS MCP service (硬件中心实验室信息管理系统)" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher weipeng11 · joined 0 days agoInstalls 60,198Last detonated 1 h ago

$claude mcp add hlims-mcp -- npx -y hlims-mcp

Report an issue

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.5sprocessdependency install exit 1

0.6sprocessexec /usr/bin/timeout

0.6sprocessexited 1: Node.js v22.23.4

0.6sclaimedno tools/list reply (exit 1)

0.6sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packageREADME.md:67 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:64 · npx invocation of non-well-known package — may execute untrusted code

AST06