mcpiranha@0.3.0
CAUTIONPublisher claims: "Security scanner for Model Context Protocol (MCP) servers" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry PyPI (MCP server)Publisher ethanroubal · joined 0 days agoInstalls 0Last detonated 2 h ago
Behavior trace
Honeypot run · 0 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.2sprocessdependency install exit 1
0.3sprocessexec /usr/bin/timeout
0.3sprocessexec .venv/bin/mcpiranha
0.3sprocessexited 127: timeout: failed to run command '.venv/bin/mcpiranha': No such file or directory
0.3sclaimedno tools/list reply (exit 127)
0.3sprocessscript backend runs setup only
Static findings
CRITICAL
Access to sensitive file pathssrc/mcpiranha/acquire/sandbox.py:170 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Destructive file system command detectedsrc/mcpiranha/acquire/sandbox.py:92 · Destructive file system command detected
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/acquire/sandbox.py:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/core/lockfile.py:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Reads credential paths from the home directorysrc/mcpiranha/rules/builtin/source_behavior.py:11 · Reads credential paths from the home directory
AST03CRITICAL
Access to sensitive file pathssrc/mcpiranha/rules/builtin/sensitive_paths.py:3 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/rules/builtin/source_behavior.py:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/rules/builtin/sensitive_paths.py:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/core/lockfile.py:70 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Pipe-to-shell patternsrc/mcpiranha/rules/builtin/source_behavior.py:13 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Destructive file system command detectedsrc/mcpiranha/dynamic/runtime.py:90 · Destructive file system command detected
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/rules/builtin/sensitive_paths.py:5 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/core/secrets.py:81 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/core/models.py:175 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/rules/builtin/encoded_payloads.py:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Reads credential paths from the home directorysrc/mcpiranha/rules/builtin/sensitive_paths.py:3 · Reads credential paths from the home directory
AST03CRITICAL
Access to sensitive file pathssrc/mcpiranha/rules/builtin/source_behavior.py:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/dynamic/constants.py:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
npx invocation of non-well-known packageREADME.md:225 · npx invocation of non-well-known package — may execute untrusted code
AST06CRITICAL
Access to sensitive file pathssrc/mcpiranha/source/javascript.py:153 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
References a credential file in the home directorysrc/mcpiranha/core/models.py:175 · References a credential file in the home directory
AST03CRITICAL
Destructive file system command detectedsrc/mcpiranha/source/patterns.py:90 · Destructive file system command detected
AST05HIGH
npx invocation of non-well-known packagesrc/mcpiranha/core/launch.py:68 · npx invocation of non-well-known package — may execute untrusted code
AST06CRITICAL
Pipe-to-shell patternsrc/mcpiranha/source/__init__.py:54 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06HIGH
npx invocation of non-well-known packagesrc/mcpiranha/core/launch.py:177 · npx invocation of non-well-known package — may execute untrusted code
AST06CRITICAL
Access to sensitive file pathssrc/mcpiranha/source/javascript.py:154 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Python subprocess execution detectedsrc/mcpiranha/dynamic/collector.py:25 · Python subprocess execution detected
AST05HIGH
npx invocation of non-well-known packagesrc/mcpiranha/core/launch.py:3 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Outbound HTTP to raw IP addresssrc/mcpiranha/acquire/oauth.py:84 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07CRITICAL
Access to sensitive file pathssrc/mcpiranha/source/patterns.py:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
npx invocation of non-well-known packagesrc/mcpiranha/core/lockfile.py:37 · npx invocation of non-well-known package — may execute untrusted code
AST06CRITICAL
Access to sensitive file pathssrc/mcpiranha/source/javascript.py:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/source/patterns.py:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Destructive file system command detectedsrc/mcpiranha/source/__init__.py:317 · Destructive file system command detected
AST05HIGH
Outbound HTTP to raw IP addresssrc/mcpiranha/acquire/oauth.py:60 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07CRITICAL
Access to sensitive file pathssrc/mcpiranha/source/javascript.py:143 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/source/patterns.py:3 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Pipe to network utilitysrc/mcpiranha/source/__init__.py:317 · Pipe to network utility — potential reverse shell
AST05CRITICAL
Access to sensitive file pathssrc/mcpiranha/source/javascript.py:144 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
npx invocation of non-well-known packagesrc/mcpiranha/rules/builtin/supply_chain.py:318 · npx invocation of non-well-known package — may execute untrusted code
AST06MEDIUM
URL using raw IP addresssrc/mcpiranha/acquire/oauth.py:84 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
Remote installer piped to shellsrc/mcpiranha/rules/builtin/source_behavior.py:13 · Remote installer piped to shell
AST07HIGH
Python subprocess execution detectedsrc/mcpiranha/rules/builtin/source_behavior.py:233 · Python subprocess execution detected
AST05HIGH
Outbound HTTP to raw IP addresssrc/mcpiranha/dynamic/invoke.py:18 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
URL using raw IP addresssrc/mcpiranha/acquire/oauth.py:60 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
npx invocation of non-well-known packagesrc/mcpiranha/supply/registry.py:139 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Python subprocess execution detectedsrc/mcpiranha/source/taint_python.py:270 · Python subprocess execution detected
AST05MEDIUM
Remote installer piped to shellsrc/mcpiranha/source/__init__.py:54 · Remote installer piped to shell
AST07HIGH
npx invocation of non-well-known packagesrc/mcpiranha/rules/builtin/typosquat.py:4 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
References a credential file in the home directorysrc/mcpiranha/rules/builtin/source_behavior.py:9 · References a credential file in the home directory
AST03MEDIUM
URL using raw IP addresssrc/mcpiranha/dynamic/invoke.py:18 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
Host or code assembled from base64 fragmentssrc/mcpiranha/rules/builtin/source_behavior.py:12 · Host or code assembled from base64 fragments
AST07HIGH
References a credential file in the home directorysrc/mcpiranha/rules/builtin/source_behavior.py:11 · References a credential file in the home directory
AST03HIGH
npx invocation of non-well-known packagesrc/mcpiranha/rules/builtin/floating_version.py:3 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
References a credential file in the home directorysrc/mcpiranha/rules/builtin/sensitive_paths.py:3 · References a credential file in the home directory
AST03