mcp-gitlab@2.3.11

CAUTION

Publisher claims: "GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher zereight · joined 0 days agoInstalls 500KLast detonated 2 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Destructive file system command detectedREADME.ko.md:335 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.md:342 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.ko.md:444 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.ko.md:364 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.md:371 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.pt-BR.md:444 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathsbuild/auth-cli.js:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedREADME.zh-CN.md:363 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.zh-CN.md:334 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.md:469 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.pt-BR.md:364 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.pt-BR.md:335 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.zh-CN.md:443 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathsbuild/oauth.js:661 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/config.js:82 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/customSchemas.js:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/config.js:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/config.js:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/cli/doctor.js:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/config.js:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/config.js:210 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/oauth.js:657 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/utils/download-token.js:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/stateless/secret.js:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/oauth.js:896 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/oauth.js:898 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/oauth.js:897 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/utils/download-token.js:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/utils/version-check.js:82 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/utils/logger.js:167 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/utils/version-check.js:86 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/utils/logger.js:164 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbuild/utils/url.js:259 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.ko.md:55 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.ko.md:62 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.ko.md:11 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.ko.md:399 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.ko.md:255 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.ko.md:89 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.ko.md:435 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Access to sensitive file pathsbuild/utils/version-check.js:101 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressREADME.ko.md:405 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:61 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:261 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:17 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:95 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:68 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.pt-BR.md:405 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.pt-BR.md:89 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.pt-BR.md:11 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:416 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressREADME.pt-BR.md:399 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.pt-BR.md:62 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:424 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.pt-BR.md:255 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.pt-BR.md:55 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:459 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.zh-CN.md:89 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.zh-CN.md:255 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.zh-CN.md:398 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.zh-CN.md:11 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.zh-CN.md:55 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.pt-BR.md:435 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressREADME.zh-CN.md:404 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.zh-CN.md:62 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressbuild/auth-cli.js:11 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressbuild/oauth.js:898 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

URL with embedded credentialsbuild/utils/url.js:35 · URL with embedded credentials — may be phishing or credential leaking

AST07

MEDIUM

URL using raw IP addressREADME.ko.md:405 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addressREADME.zh-CN.md:434 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

URL with embedded credentialsbuild/utils/redact-url.js:575 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

URL with embedded credentialsbuild/utils/redact-url.js:392 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

URL with embedded credentialsbuild/utils/redact-url.js:12 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

Outbound HTTP to raw IP addressbuild/oauth-consent.js:32 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressREADME.ko.md:399 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

npx invocation of non-well-known packagebuild/cli/setup.js:5 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

URL with embedded credentialsbuild/utils/redact-url.js:811 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

URL with embedded credentialsbuild/utils/url.js:119 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

URL with embedded credentialsbuild/utils/redact-url.js:809 · URL with embedded credentials — may be phishing or credential leaking

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.pt-BR.md:423 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.ko.md:414 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressREADME.md:424 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.ko.md:423 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.ko.md:449 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressREADME.pt-BR.md:435 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.ko.md:489 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressREADME.md:459 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.ko.md:653 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressREADME.ko.md:435 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressREADME.pt-BR.md:405 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:708 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:437 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:446 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.pt-BR.md:414 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressREADME.pt-BR.md:399 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:696 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:474 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressREADME.md:416 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.pt-BR.md:449 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressbuild/oauth.js:898 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressREADME.zh-CN.md:404 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressREADME.zh-CN.md:434 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.zh-CN.md:652 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.zh-CN.md:448 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.pt-BR.md:653 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.pt-BR.md:489 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressbuild/oauth-consent.js:32 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.zh-CN.md:413 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.zh-CN.md:488 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

LOW

Unpinned dependencyREADME.ko.md:11 · Unpinned dependency

AST06

MEDIUM

MCP server using network transport (SSE/HTTP)README.zh-CN.md:422 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressbuild/auth-cli.js:11 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressREADME.zh-CN.md:398 · URL using raw IP address — may bypass domain-based filtering

AST07

LOW

Unpinned dependencyREADME.pt-BR.md:11 · Unpinned dependency

AST06

LOW

Unpinned dependencyREADME.zh-CN.md:55 · Unpinned dependency

AST06

LOW

Unpinned dependencyREADME.md:61 · Unpinned dependency

AST06

LOW

Unpinned dependencyREADME.zh-CN.md:11 · Unpinned dependency

AST06

LOW

Unpinned dependencyREADME.md:17 · Unpinned dependency

AST06

LOW

Unpinned dependencyREADME.ko.md:55 · Unpinned dependency

AST06

LOW

Unpinned dependencyREADME.pt-BR.md:55 · Unpinned dependency

AST06