signer@0.11.0-alpha.0

CAUTION

Publisher claims: "Haven edge signer — holds the agent's delegate key locally and signs payment hashes + x402 headers. Pairs with the hosted, keyless @haven_ai/mcp-server; the key never leaves the machine." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher haven_ai · joined 0 days agoInstalls 17,975Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.7sprocessdependency install exit 1

0.7sprocessexec /usr/bin/timeout

0.7sprocessexited 1: Node.js v22.23.4

0.7sclaimedno tools/list reply (exit 1)

0.7sprocessscript backend runs setup only

Static findings

HIGH

File permission modification commandREADME.md:490 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packagedist/cli.cjs:527 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/cli.js:2339 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/index.cjs:2387 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/cli.js:88 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commanddist/cli.cjs:122 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packagedist/cli.js:2211 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/index.cjs:1034 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packagedist/cli.cjs:2655 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/index.js:1065 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packageREADME.md:48 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/index.cjs:2599 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

MCP server using network transport (SSE/HTTP)dist/index.d.ts:936 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

npx invocation of non-well-known packagedist/index.js:2386 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/cli.cjs:2374 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/index.cjs:409 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

MCP server using network transport (SSE/HTTP)dist/index.js:2632 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

npx invocation of non-well-known packagedist/cli.js:2653 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:54 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/index.js:1033 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packageREADME.md:35 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/index.js:2598 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/index.cjs:1066 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packagedist/cli.cjs:2341 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/cli.js:2372 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commandREADME.md:494 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packageREADME.md:56 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/index.d.ts:446 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packagedist/index.js:408 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/cli.cjs:90 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packageREADME.md:62 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/cli.js:120 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packagedist/cli.cjs:2213 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/cli.js:3 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packagedist/cli.js:525 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commanddist/index.d.ts:416 · File permission modification command — agent changes file ownership/permissions

AST05