1xn-vmcp@0.6.1

CAUTION

Publisher claims: "v(irtual)MCP - Extend, Compose, Customize MCP servers" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher 1xn-labs · joined 0 days agoInstalls 108Last detonated 2 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsvmcp/cli/main.py:613 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsvmcp/mcps/router_typesafe.py:423 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsvmcp/mcps/models.py:920 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsvmcp/vmcps/router_typesafe.py:2530 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

HTML comment carrying imperative instructions to the agentvmcp/server/templates/unauthorized.html:37 · HTML comment carrying imperative instructions to the agent

AST01

HIGH

Python subprocess execution detectedvmcp/scripts/postgres_setup.py:33 · Python subprocess execution detected

AST05

CRITICAL

Access to sensitive file pathsvmcp/mcps/router_typesafe.py:389 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedvmcp/scripts/postgres_setup.py:68 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedvmcp/cli/main.py:396 · Python subprocess execution detected

AST05

CRITICAL

Access to sensitive file pathsvmcp/scripts/postgres_setup.py:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsvmcp/mcps/router_typesafe.py:176 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsvmcp/mcps/models.py:874 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsvmcp/mcps/router_typesafe.py:209 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedvmcp/cli/main.py:365 · Python subprocess execution detected

AST05

CRITICAL

Access to sensitive file pathsvmcp/mcps/router_typesafe.py:255 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedvmcp/scripts/postgres_setup.py:53 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedvmcp/scripts/postgres_setup.py:52 · Python subprocess execution detected

AST05

CRITICAL

Access to sensitive file pathsvmcp/mcps/models.py:889 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packagevmcp/server/templates/unauthorized.html:432 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

MCP server using network transport (SSE/HTTP)vmcp/mcps/mcp_client_manager.py:332 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)vmcp/server/templates/unauthorized.html:246 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)vmcp/server/templates/unauthorized.html:219 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

npx invocation of non-well-known packagevmcp/server/templates/unauthorized.html:178 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

MCP server using network transport (SSE/HTTP)vmcp/server/templates/unauthorized.html:233 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

File type combined with upload actionvmcp/scripts/upload_default_vmcp.py:4 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)vmcp/data/preconfigured-servers.json:1142 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

npx invocation of non-well-known packagevmcp/server/templates/unauthorized.html:177 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagevmcp/server/templates/unauthorized.html:455 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionvmcp/scripts/upload_preconfigured_servers.py:4 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packagevmcp/server/templates/unauthorized.html:426 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

MCP server using network transport (SSE/HTTP)vmcp/server/templates/unauthorized.html:232 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)vmcp/server/templates/unauthorized.html:218 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04