mcp-remote@0.15.2

CAUTION

Publisher claims: "Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher punkpeye · joined 0 days agoInstalls 3.1MLast detonated 2 h ago

Dispute verdict

Behavior trace

Honeypot run · 3 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

3.1sprocessdependency install exit 1

3.4sprocessexec /usr/bin/timeout

3.4sprocessexited 1: Node.js v22.23.4

3.4sclaimedno tools/list reply (exit 1)

3.4sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packageREADME.md:360 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:432 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:382 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:430 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:278 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:442 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

URL using raw IP addressREADME.md:278 · URL using raw IP address — may bypass domain-based filtering

AST07