20 package versions under an incident.
An incident opens when a hook on someone's machine sees a skill read a credential path or contact a host its verdict never saw, or when the honeypot catches a version itself. Field incidents are re-run in the honeypot within one crawl cycle and confirmed only if the sandbox observes the behavior; otherwise they are retracted and left here. While one is open, every hook asking about that package gets a one-minute answer instead of five.
Open
0
Confirmed
20
Retracted
0
Signal to verdict (median, 7 days)
—
| Package | Status | Reported from the field | What the honeypot saw | Opened |
|---|---|---|---|---|
| agent-comm-hub@3.0.29+9eec25d liuboacean · ClawHub · 4,452 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 2 h ago closed 2 h ago |
| siluzan-tso@1.1.65+ab373e7 sigedev01-bit · ClawHub · 4,265 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked static analysis only — behavior not yet observed. | 7 h ago closed 7 h ago |
| mcp-server@1.5.76 diviops · npm · 4,987 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked no network, touches nothing outside the project, writes no memory. | 8 h ago closed 8 h ago |
| siluzan-tso@1.1.65 sigedev01-bit · ClawHub · 4,265 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 8 h ago closed 8 h ago |
| kin@0.8.7 kinlab · npm | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 8 h ago closed 8 h ago |
| simplechecklist@1.0.0 devmayur · Docker MCP Catalog | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 8 h ago closed 8 h ago |
| multi-repo-dev@1.1.2 yonsun-w · npm · 17 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked calls github.com only, touches nothing outside the project, writes no memory. | 8 h ago closed 8 h ago |
| godot-mcp-docs@1.0.1 matthew-scott · PyPI · 26 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked calls github.com only, touches nothing outside the project, writes no memory. | 8 h ago closed 8 h ago |
| package@1.0.0 xuzhonglin12138 · ClawHub · 27 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked sends data to log.rainbond.com. | 8 h ago closed 8 h ago |
| epsimo-agent@0.3.0 thierryteisseire · npm · 72 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked calls github.com only, touches nothing outside the project, writes no memory. | 8 h ago closed 8 h ago |
| cloakbrowsermcp@2.0.4 overtimepog · PyPI · 212 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked calls github.com only, touches nothing outside the project, writes no memory. | 8 h ago closed 8 h ago |
| video-downloader-by-browser@1.3.0 sedey999 · ClawHub · 523 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 8 h ago closed 8 h ago |
| linggen@2.4.0 linggen · ClawHub · 2,784 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked sends data to linggen.dev. | 8 h ago closed 8 h ago |
| siluzan-tso@1.1.64 sigedev01-bit · ClawHub · 4,265 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 8 h ago closed 8 h ago |
| siluzan-tso@1.1.57 sigedev01-bit · ClawHub · 4,265 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 8 h ago closed 8 h ago |
| siluzan-tso@1.1.63 sigedev01-bit · ClawHub · 4,265 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 8 h ago closed 8 h ago |
| agent-comm-hub@3.0.31+8b4dfd5 liuboacean · ClawHub · 4,452 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 8 h ago closed 8 h ago |
| agent-comm-hub@3.0.33 liuboacean · ClawHub · 4,452 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 8 h ago closed 8 h ago |
| command-center@1.5.0 jontsai · ClawHub · 13,904 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files. | 8 h ago closed 8 h ago |
| agent-comm-hub@3.0.31 liuboacean · ClawHub · 4,452 installs | confirmed the honeypot observed it | Caught by the honeypot during a crawl | blocked reads credential files, sends data to registry.npmmirror.com. | 37 h ago closed 37 h ago |
What is never here: who reported, from where, what host or path they saw, or any content. A hook sends the package name, version, kind of deviation and tool name only (schema). Verdicts change only on a honeypot run; a field signal alone never changes one.