ios-simulator-mcp@2.1.0
CAUTIONPublisher claims: "MCP server for interacting with the iOS simulator" Observed in sandbox: static analysis only — behavior not yet observed.
Registry npm (MCP server)Publisher joshuayoes · joined 0 days agoInstalls 21,491Last detonated 1 h ago
Behavior trace
Queued for honeypot run · static analysis onlyt+CategoryObserved action
This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
HIGH
npx invocation of non-well-known packageREADME.md:470 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageREADME.md:547 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageREADME.md:433 · npx invocation of non-well-known package — may execute untrusted code
AST06MEDIUM
Dense URL-encoded contentREADME.md:17 · Dense URL-encoded content — may be obfuscating payloads
AST07MEDIUM
MCP server using network transport (SSE/HTTP)README.md:18 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04HIGH
npx invocation of non-well-known packageREADME.md:551 · npx invocation of non-well-known package — may execute untrusted code
AST06