plugin-mcp@3.92.0

CAUTION

Publisher claims: "MCP (Model Context Protocol) capabilities with Payload" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher payloadcms · joined 0 days agoInstalls 530KLast detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 4 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

3.4sprocessdependency install exit 1

3.8sprocessexec /usr/bin/timeout

3.8sprocessexited 1: Node.js v22.23.4

3.8sclaimedno tools/list reply (exit 1)

3.8sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathssrc/mcp/helpers/config.ts:158 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/mcp/helpers/config.js:107 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/mcp/getMcpHandler.js:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/mcp/getMcpHandler.ts:90 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/types.ts:362 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/types.d.ts:308 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05