mcp-linear@1.4.5

CAUTION

Publisher claims: "A Model Context Protocol (MCP) server implementation for the Linear GraphQL API that enables AI assistants to manage Linear projects and search issues by text, state, and date." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher tacticlaunch · joined 0 days agoInstalls 128KLast detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 2 s · 2 scenarios · 0 deviations

t+CategoryObserved action

1.7sprocessdependency install exit 1

2.2sprocessexec /usr/bin/timeout

2.2sprocessexited 1: Node.js v22.23.4

2.2sclaimedno tools/list reply (exit 1)

2.3sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsdist/auth/credential-store.js:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/auth/cli.js:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/auth/cli.js:53 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/auth/credential-store.js:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/utils/config.js:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressdist/auth/callback-server.js:36 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Access to sensitive file pathsdist/utils/config.js:53 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:101 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsdist/utils/config.js:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/utils/config.js:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressdist/auth/callback-server.js:36 · URL using raw IP address — may bypass domain-based filtering

AST07