mockserver-client@9.1.0
CAUTIONPublisher claims: "A node client for the MockServer" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher mock-server · joined 0 days agoInstalls 433KLast detonated 2 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
CRITICAL
Access to sensitive file pathsREADME.md:404 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
npx invocation of non-well-known packagepackage.json:162 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageREADME.md:480 · npx invocation of non-well-known package — may execute untrusted code
AST06MEDIUM
Excessive HTML entities detectedREADME.md:13 · Excessive HTML entities detected — may be obfuscating content
AST07MEDIUM
Excessive HTML entities detectedREADME.md:11 · Excessive HTML entities detected — may be obfuscating content
AST07MEDIUM
Excessive HTML entities detectedREADME.md:14 · Excessive HTML entities detected — may be obfuscating content
AST07