1wlf-tms-mcp@0.1.2

CAUTION

Publisher claims: "MCP server for the 1WLF Task Management System" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher pypi · joined 0 days agoInstalls 66Last detonated 2 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.4sprocessdependency install exit 1

0.5sprocessexec /usr/bin/timeout

0.5sprocessexec .venv/bin/tms-mcp

0.5sprocessexited 127: timeout: failed to run command '.venv/bin/tms-mcp': No such file or directory

0.5sclaimedno tools/list reply (exit 127)

0.5sprocessscript backend runs setup only

Static findings

CRITICAL

Pipe-to-shell patternREADME.md:13 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

MEDIUM

Remote installer piped to shellREADME.md:13 · Remote installer piped to shell

AST07