{"advisories":[{"id":"AGENTSCORE-2026-0122","package":"execbro","old_version":"2.9.8","new_version":"2.11.0","old_score":100,"new_score":90,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/build/__tests__/unit/inputTarget.test.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input (downgraded — mitigators detected in scope: test_fixture:it()","severity":"low","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead.","mitigators_detected":["it("],"mitigation_categories":["test_fixture"],"severity_downgraded_from":"high"},{"file":"package/build/core/ocr.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:spawn(pythonPath, [)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["spawn(pythonPath, ["],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"execbro updated from 2.9.8 to 2.11.0. Score changed 100/100 to 90/100 (-10). Risk: LOW to LOW. 2 findings.","detected_at":"2026-09-09T15:00:51.739+00:00","published_at":"2026-09-09T15:00:52.728787+00:00"},{"id":"AGENTSCORE-2026-0121","package":"ucn","old_version":"5.3.3","new_version":"5.3.4","old_score":95,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/core/stacktrace.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: mleoca","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"ucn updated from 5.3.3 to 5.3.4. Score changed 95/100 to 75/100 (-20). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-09-07T11:20:42.752+00:00","published_at":"2026-09-07T11:20:42.811529+00:00"},{"id":"AGENTSCORE-2026-0120","package":"google-tools-mcp","old_version":"2.0.0","new_version":"3.4.5","old_score":95,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"excessive_dependencies","detail":"Package has 21 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/setup.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.join)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.join"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"google-tools-mcp updated from 2.0.0 to 3.4.5. Score changed 95/100 to 85/100 (-10). Risk: LOW to LOW. 2 findings.","detected_at":"2026-09-05T15:52:20.029+00:00","published_at":"2026-09-05T15:52:20.086653+00:00"},{"id":"AGENTSCORE-2026-0119","package":"@yawlabs/mcp","old_version":"0.79.1","new_version":"0.79.2","old_score":95,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'preinstall' script: node -e \"const major=Number(process.versions.node.split('.')[0]);if(major<20){console.error('@yawlabs/mcp requires Node 20 or newer; this is Node '+process.versions.node+'. Upgrade Node, then re-run t","severity":"high","recommendation":"Review the install script for network calls or code execution"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: jeffyaw","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@yawlabs/mcp updated from 0.79.1 to 0.79.2. Score changed 95/100 to 75/100 (-20). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-09-03T00:46:17.007+00:00","published_at":"2026-09-03T00:46:17.080087+00:00"},{"id":"AGENTSCORE-2026-0118","package":"axm.sh","old_version":"0.28.2","new_version":"0.28.4","old_score":100,"new_score":90,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"excessive_dependencies","detail":"Package has 23 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"axm.sh updated from 0.28.2 to 0.28.4. Score changed 100/100 to 90/100 (-10). Risk: LOW to LOW. 1 finding.","detected_at":"2026-09-02T10:40:35.787+00:00","published_at":"2026-09-02T10:40:35.843218+00:00"},{"id":"AGENTSCORE-2026-0117","package":"@agent360/browser-mcp","old_version":"1.25.0","new_version":"1.28.1","old_score":90,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/index.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: glouv","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@agent360/browser-mcp updated from 1.25.0 to 1.28.1. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-09-02T06:46:21.729+00:00","published_at":"2026-09-02T06:46:21.799608+00:00"},{"id":"AGENTSCORE-2026-0116","package":"@sidebutton/server","old_version":"1.5.5","new_version":"1.5.9","old_score":90,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dashboard/assets/index-CsPS9ETx.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: maxsv","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":["sidebutton"],"verdict":"warn","severity":"high","summary":"@sidebutton/server updated from 1.5.5 to 1.5.9. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-09-02T04:30:37.159+00:00","published_at":"2026-09-02T04:30:37.426507+00:00"},{"id":"AGENTSCORE-2026-0115","package":"@mrrlin-dev/external-agents","old_version":"0.47.0","new_version":"0.59.0","old_score":85,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall-banner.mjs || true","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/lib/dispatch.progress.test.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:spawn(process.execPath, [, sanitizer:path.join)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["spawn(process.execPath, [","path.join","${JSON.stringify(","test(","fixture"],"mitigation_categories":["sanitizer","test_fixture"],"severity_downgraded_from":"high"},{"file":"package/lib/failure-log.test.js","type":"hardcoded_secret","detail":"Hardcoded secret found (AWS key, OpenAI key, GitHub token, or npm token) (downgraded — mitigators detected in scope: test_fixture:test(, test_fixture:abcdef)","severity":"medium","recommendation":"Remove hardcoded secrets. Use environment variables instead.","mitigators_detected":["test(","abcdef"],"mitigation_categories":["test_fixture"],"severity_downgraded_from":"critical"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: aiuxsolutions","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@mrrlin-dev/external-agents updated from 0.47.0 to 0.59.0. Score changed 85/100 to 75/100 (-10). Risk: LOW to MODERATE. 4 findings.","detected_at":"2026-09-01T21:30:38.191+00:00","published_at":"2026-09-01T21:30:38.482256+00:00"},{"id":"AGENTSCORE-2026-0114","package":"slashvibe-mcp","old_version":"0.8.18","new_version":"0.8.21","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: brightseth","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"slashvibe-mcp updated from 0.8.18 to 0.8.21. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-09-01T01:40:24.872+00:00","published_at":"2026-09-01T01:40:25.150747+00:00"},{"id":"AGENTSCORE-2026-0113","package":"@cyanheads/git-mcp-server","old_version":"2.15.1","new_version":"2.15.3","old_score":95,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/index.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: cyanheads","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@cyanheads/git-mcp-server updated from 2.15.1 to 2.15.3. Score changed 95/100 to 75/100 (-20). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-08-29T20:10:29.957+00:00","published_at":"2026-08-29T20:10:30.23142+00:00"},{"id":"AGENTSCORE-2026-0112","package":"hive-intelligence","old_version":"1.3.0","new_version":"1.5.2","old_score":90,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"excessive_dependencies","detail":"Package has 27 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/build/chunk-GB4XMTDE.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:${REGISTRY_PACKAGE})","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["${REGISTRY_PACKAGE}"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"hive-intelligence updated from 1.3.0 to 1.5.2. Score changed 90/100 to 85/100 (-5). Risk: LOW to LOW. 2 findings.","detected_at":"2026-08-29T18:00:51.481+00:00","published_at":"2026-08-29T18:00:51.796899+00:00"},{"id":"AGENTSCORE-2026-0111","package":"md-redline","old_version":"0.8.3","new_version":"0.9.0","old_score":75,"new_score":65,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"excessive_dependencies","detail":"Package has 23 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/bin/server-control.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: dejuknow","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"md-redline updated from 0.8.3 to 0.9.0. Score changed 75/100 to 65/100 (-10). Risk: MODERATE to ELEVATED. 3 findings.","detected_at":"2026-08-28T21:28:19.813+00:00","published_at":"2026-08-28T21:28:19.872927+00:00"},{"id":"AGENTSCORE-2026-0110","package":"@osfactory/har","old_version":"0.64.3","new_version":"1.0.0","old_score":90,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/ensure-telemetry-default.cjs","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/dist/index.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@osfactory/har updated from 0.64.3 to 1.0.0. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-08-28T13:24:18.531+00:00","published_at":"2026-08-28T13:24:18.604314+00:00"},{"id":"AGENTSCORE-2026-0109","package":"crawlforge-mcp-server","old_version":"5.0.1","new_version":"5.1.0","old_score":90,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: echo '\nCrawlForge MCP Server installed!\n\nQuick start: run \"npx crawlforge init\" to configure your API key, install skills, and register the MCP server with your AI clients.\nOr run \"npx crawlforge-setu","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"type":"excessive_dependencies","detail":"Package has 21 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: slacey75","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"crawlforge-mcp-server updated from 5.0.1 to 5.1.0. Score changed 90/100 to 80/100 (-10). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-08-26T07:20:26.18+00:00","published_at":"2026-08-26T07:20:26.251578+00:00"},{"id":"AGENTSCORE-2026-0108","package":"browse-ai","old_version":"0.3.2","new_version":"1.0.0","old_score":95,"new_score":60,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node -e \"console.warn('\n⚠ browse-ai is now lastsearch — https://lastsearch.ai/migrate (this bridge stops working 2026-10-31)\n')\"","severity":"high","recommendation":"Review the install script for network calls or code execution"},{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"type":"no_license","detail":"Package has no licence specified","severity":"low","recommendation":"Unlicensed code has unclear usage rights"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: shreyassaw","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"browse-ai updated from 0.3.2 to 1.0.0. Score changed 95/100 to 60/100 (-35). Risk: LOW to ELEVATED. 4 findings.","detected_at":"2026-08-24T10:48:16.971+00:00","published_at":"2026-08-24T10:48:17.036039+00:00"},{"id":"AGENTSCORE-2026-0107","package":"maxion-mcp-gateway","old_version":"16.0.10","new_version":"17.0.0","old_score":95,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/install_engines.js","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"type":"no_license","detail":"Package has no licence specified","severity":"low","recommendation":"Unlicensed code has unclear usage rights"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: aruuh","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"maxion-mcp-gateway updated from 16.0.10 to 17.0.0. Score changed 95/100 to 75/100 (-20). Risk: LOW to MODERATE. 4 findings.","detected_at":"2026-08-21T10:34:16.652+00:00","published_at":"2026-08-21T10:34:16.709158+00:00"},{"id":"AGENTSCORE-2026-0106","package":"memorix","old_version":"1.5.0","new_version":"1.5.1","old_score":85,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"excessive_dependencies","detail":"Package has 23 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/cli/index.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:.exec(`BEGIN, test_fixture:test()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":[".exec(`BEGIN","test("],"mitigation_categories":["sanitizer","test_fixture"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: avids2","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"memorix updated from 1.5.0 to 1.5.1. Score changed 85/100 to 80/100 (-5). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-08-16T16:04:19.901+00:00","published_at":"2026-08-16T16:04:19.967743+00:00"},{"id":"AGENTSCORE-2026-0105","package":"prism-mcp-server","old_version":"20.8.1","new_version":"20.11.1","old_score":90,"new_score":70,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node -e \"import('./dist/postinstall.js').catch(()=>{})\"","severity":"high","recommendation":"Review the install script for network calls or code execution"},{"type":"excessive_dependencies","detail":"Package has 26 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"prism-mcp-server updated from 20.8.1 to 20.11.1. Score changed 90/100 to 70/100 (-20). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-08-14T02:40:37.499+00:00","published_at":"2026-08-14T02:40:37.577748+00:00"},{"id":"AGENTSCORE-2026-0104","package":"@iris-eval/mcp-server","old_version":"0.4.5","new_version":"0.5.0","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/dist/storage/migrations/005-normalize-created-at.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:.exec(`\n      UPDATE, sanitizer:db.exec()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":[".exec(`\n      UPDATE","db.exec("],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@iris-eval/mcp-server updated from 0.4.5 to 0.5.0. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-08-13T07:01:00.004+00:00","published_at":"2026-08-13T07:01:00.093907+00:00"},{"id":"AGENTSCORE-2026-0103","package":"comfyui-mcp","old_version":"0.51.24","new_version":"0.51.25","old_score":95,"new_score":90,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall.mjs","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/dist/services/ai-toolkit.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:${JSON.stringify()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["${JSON.stringify("],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"comfyui-mcp updated from 0.51.24 to 0.51.25. Score changed 95/100 to 90/100 (-5). Risk: LOW to LOW. 2 findings.","detected_at":"2026-08-13T06:42:16.863+00:00","published_at":"2026-08-13T06:42:16.923178+00:00"},{"id":"AGENTSCORE-2026-0102","package":"memorix","old_version":"1.4.2","new_version":"1.4.3","old_score":85,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"excessive_dependencies","detail":"Package has 23 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/cli/index.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:.exec(`BEGIN, test_fixture:test()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":[".exec(`BEGIN","test("],"mitigation_categories":["sanitizer","test_fixture"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: avids2","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"memorix updated from 1.4.2 to 1.4.3. Score changed 85/100 to 80/100 (-5). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-08-13T00:10:40.441+00:00","published_at":"2026-08-13T00:10:40.533344+00:00"},{"id":"AGENTSCORE-2026-0101","package":"sverklo","old_version":"0.29.4","new_version":"0.29.5","old_score":100,"new_score":60,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"file":"package/dist/src/audit-diff/diff-parser.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"file":"package/dist/src/search/investigate.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"sverklo updated from 0.29.4 to 0.29.5. Score changed 100/100 to 60/100 (-40). Risk: LOW to ELEVATED. 2 findings.","detected_at":"2026-08-12T15:50:35.485+00:00","published_at":"2026-08-12T15:50:35.755257+00:00"},{"id":"AGENTSCORE-2026-0100","package":"vexp-cli","old_version":"2.5.0","new_version":"2.5.3","old_score":90,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"file":"package/dist/mcp-supervisor.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:spawn(\"node\", [, sanitizer:path.join)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["spawn(\"node\", [","path.join"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: vexp","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"vexp-cli updated from 2.5.0 to 2.5.3. Score changed 90/100 to 80/100 (-10). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-08-10T20:40:36.216+00:00","published_at":"2026-08-10T20:40:36.292303+00:00"},{"id":"AGENTSCORE-2026-0099","package":"real-browser-mcp-server","old_version":"2.2.6","new_version":"3.2.7","old_score":80,"new_score":60,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: patchright install chromium","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"file":"package/dist/src/mcp/handlers/network-extractors.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: codeiva","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"real-browser-mcp-server updated from 2.2.6 to 3.2.7. Score changed 80/100 to 60/100 (-20). Risk: MODERATE to ELEVATED. 4 findings.","detected_at":"2026-08-10T04:40:36.461+00:00","published_at":"2026-08-10T04:40:36.531135+00:00"},{"id":"AGENTSCORE-2026-0098","package":"mojulo","old_version":"0.8.0","new_version":"1.0.0","old_score":95,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"excessive_dependencies","detail":"Package has 23 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: zombico","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"mojulo updated from 0.8.0 to 1.0.0. Score changed 95/100 to 85/100 (-10). Risk: LOW to LOW. 2 findings.","detected_at":"2026-08-08T00:01:05.328+00:00","published_at":"2026-08-08T00:01:05.566996+00:00"},{"id":"AGENTSCORE-2026-0097","package":"beecork","old_version":"2.8.3","new_version":"2.9.0","old_score":100,"new_score":90,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/skeleton/bridge.mjs","type":"hardcoded_secret","detail":"Hardcoded secret found (AWS key, OpenAI key, GitHub token, or npm token) (downgraded — mitigators detected in scope: test_fixture:ABCDEF)","severity":"medium","recommendation":"Remove hardcoded secrets. Use environment variables instead.","mitigators_detected":["ABCDEF"],"mitigation_categories":["test_fixture"],"severity_downgraded_from":"critical"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"beecork updated from 2.8.3 to 2.9.0. Score changed 100/100 to 90/100 (-10). Risk: LOW to LOW. 1 finding.","detected_at":"2026-08-07T21:48:16.126+00:00","published_at":"2026-08-07T21:48:16.287824+00:00"},{"id":"AGENTSCORE-2026-0096","package":"rea-agents","old_version":"2.5.0","new_version":"3.0.0","old_score":85,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"excessive_dependencies","detail":"Package has 26 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/hopper/BridgeLauncher.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:execFile, sanitizer:${JSON.stringify()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["execFile","${JSON.stringify("],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: morluto","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"rea-agents updated from 2.5.0 to 3.0.0. Score changed 85/100 to 80/100 (-5). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-08-03T18:10:31.64+00:00","published_at":"2026-08-03T18:10:31.713238+00:00"},{"id":"AGENTSCORE-2026-0095","package":"@pushary/agent-hooks","old_version":"0.60.0","new_version":"0.73.0","old_score":80,"new_score":70,"old_risk":"MODERATE","new_risk":"MODERATE","findings":[{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"file":"package/dist/bin/pushary-doctor.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@pushary/agent-hooks updated from 0.60.0 to 0.73.0. Score changed 80/100 to 70/100 (-10). Risk: MODERATE to MODERATE. 2 findings.","detected_at":"2026-08-01T01:40:34.182+00:00","published_at":"2026-08-01T01:40:34.286187+00:00"},{"id":"AGENTSCORE-2026-0094","package":"@apso/cli","old_version":"0.21.0","new_version":"0.32.0","old_score":85,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"excessive_dependencies","detail":"Package has 21 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"type":"poor_description","detail":"Package has no meaningful description","severity":"low","recommendation":"Well-documented packages are more trustworthy"},{"file":"package/dist/commands/init.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.join, test_fixture:test()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.join","test("],"mitigation_categories":["sanitizer","test_fixture"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: cultron","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@apso/cli updated from 0.21.0 to 0.32.0. Score changed 85/100 to 75/100 (-10). Risk: LOW to MODERATE. 4 findings.","detected_at":"2026-07-31T16:10:36.211+00:00","published_at":"2026-07-31T16:10:36.509866+00:00"},{"id":"AGENTSCORE-2026-0093","package":"@firfi/huly-mcp","old_version":"0.44.7","new_version":"0.47.0","old_score":80,"new_score":60,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"excessive_dependencies","detail":"Package has 21 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/index.cjs","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:.exec(`\n      PRAGMA, sanitizer:db.exec()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":[".exec(`\n      PRAGMA","db.exec(","${VERSION2}"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"file":"package/dist/index.cjs","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: firfi","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@firfi/huly-mcp updated from 0.44.7 to 0.47.0. Score changed 80/100 to 60/100 (-20). Risk: MODERATE to ELEVATED. 4 findings.","detected_at":"2026-07-31T14:50:38.929+00:00","published_at":"2026-07-31T14:50:39.032062+00:00"},{"id":"AGENTSCORE-2026-0092","package":"@mentu/metamcp","old_version":"0.4.1","new_version":"0.6.0","old_score":90,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/oauth-provider.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: rashidazarang","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@mentu/metamcp updated from 0.4.1 to 0.6.0. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-07-30T02:04:15.796+00:00","published_at":"2026-07-30T02:04:15.853073+00:00"},{"id":"AGENTSCORE-2026-0091","package":"code-auditor-mcp","old_version":"3.1.1","new_version":"3.4.7","old_score":70,"new_score":55,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"file":"package/dist/churn/churnExtractor.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"file":"package/dist/cli.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: bhammond","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"code-auditor-mcp updated from 3.1.1 to 3.4.7. Score changed 70/100 to 55/100 (-15). Risk: MODERATE to ELEVATED. 3 findings.","detected_at":"2026-07-29T09:20:32.837+00:00","published_at":"2026-07-29T09:20:32.902637+00:00"},{"id":"AGENTSCORE-2026-0090","package":"safari-mcp","old_version":"2.15.8","new_version":"2.15.9","old_score":70,"new_score":65,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall.cjs || true","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/scripts/postinstall.cjs","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.join, sanitizer:${STABLE_ID})","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.join","${STABLE_ID}","codesign"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"file":"package/extension/background.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: achiya","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"safari-mcp updated from 2.15.8 to 2.15.9. Score changed 70/100 to 65/100 (-5). Risk: MODERATE to ELEVATED. 4 findings.","detected_at":"2026-07-28T16:04:16.901+00:00","published_at":"2026-07-28T16:04:16.961083+00:00"},{"id":"AGENTSCORE-2026-0089","package":"ori-memory","old_version":"0.5.5","new_version":"0.6.0","old_score":95,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/cli/repl.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: aayoawoyemi","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"ori-memory updated from 0.5.5 to 0.6.0. Score changed 95/100 to 75/100 (-20). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-07-27T21:42:16.882+00:00","published_at":"2026-07-27T21:42:16.944877+00:00"},{"id":"AGENTSCORE-2026-0088","package":"real-browser-mcp-server","old_version":"2.0.10","new_version":"2.2.2","old_score":85,"new_score":60,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/setup-browser.js","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"file":"package/dist/src/mcp/handlers/network-extractors.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: codeiva","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"real-browser-mcp-server updated from 2.0.10 to 2.2.2. Score changed 85/100 to 60/100 (-25). Risk: LOW to ELEVATED. 4 findings.","detected_at":"2026-07-24T23:40:32.115+00:00","published_at":"2026-07-24T23:40:32.21341+00:00"},{"id":"AGENTSCORE-2026-0087","package":"code-auditor-mcp","old_version":"3.0.0","new_version":"3.1.1","old_score":90,"new_score":70,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/auditRunner.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.resolve, sanitizer:${handoffRemaining.length})","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.resolve","${handoffRemaining.length}"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"file":"package/dist/cli.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: bhammond","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"code-auditor-mcp updated from 3.0.0 to 3.1.1. Score changed 90/100 to 70/100 (-20). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-07-24T00:40:35.127+00:00","published_at":"2026-07-24T00:40:35.371657+00:00"},{"id":"AGENTSCORE-2026-0086","package":"@respira/wordpress-mcp-server","old_version":"7.6.1","new_version":"7.6.2","old_score":75,"new_score":65,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"file":"package/dist/agent-signature.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: mihai_respira","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@respira/wordpress-mcp-server updated from 7.6.1 to 7.6.2. Score changed 75/100 to 65/100 (-10). Risk: MODERATE to ELEVATED. 3 findings.","detected_at":"2026-07-23T21:28:16.922+00:00","published_at":"2026-07-23T21:28:17.005088+00:00"},{"id":"AGENTSCORE-2026-0085","package":"aiwg","old_version":"2026.7.16","new_version":"2026.7.17","old_score":100,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/src/config/cli.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"aiwg updated from 2026.7.16 to 2026.7.17. Score changed 100/100 to 80/100 (-20). Risk: LOW to MODERATE. 1 finding.","detected_at":"2026-07-23T03:52:20.186+00:00","published_at":"2026-07-23T03:52:20.2688+00:00"},{"id":"AGENTSCORE-2026-0084","package":"tribunal-kit","old_version":"5.8.2","new_version":"5.8.4","old_score":85,"new_score":70,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/commands/optimize.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"file":"package/.agent/scripts/inner_loop_validator.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input (downgraded — mitigators detected in scope: sanitizer:__dirname)","severity":"low","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead.","mitigators_detected":["__dirname"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: harmit_.3","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"tribunal-kit updated from 5.8.2 to 5.8.4. Score changed 85/100 to 70/100 (-15). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-07-22T17:00:55.547+00:00","published_at":"2026-07-22T17:00:55.8102+00:00"},{"id":"AGENTSCORE-2026-0083","package":"agent-security-scanner-mcp","old_version":"4.5.1","new_version":"4.5.2","old_score":85,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall.js","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/src/fix-patterns.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:sanitize, sanitizer:execFile)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["sanitize","execFile"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"file":"package/benchmarks/corpus/javascript_injection.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input (downgraded — mitigators detected in scope: sanitizer:execFile, sanitizer:spawn(\"bash\", [)","severity":"low","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead.","mitigators_detected":["execFile","spawn(\"bash\", ["],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: prooflayer","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"agent-security-scanner-mcp updated from 4.5.1 to 4.5.2. Score changed 85/100 to 80/100 (-5). Risk: LOW to MODERATE. 4 findings.","detected_at":"2026-07-22T03:04:16.614+00:00","published_at":"2026-07-22T03:04:16.674575+00:00"},{"id":"AGENTSCORE-2026-0082","package":"patchwork-os","old_version":"1.1.0-beta.3","new_version":"1.1.0-beta.4","old_score":90,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall.mjs || true","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/dist/index.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:execFile, sanitizer:path.join)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["execFile","path.join"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: oolab-labs","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"patchwork-os updated from 1.1.0-beta.3 to 1.1.0-beta.4. Score changed 90/100 to 85/100 (-5). Risk: LOW to LOW. 3 findings.","detected_at":"2026-07-21T21:20:33.53+00:00","published_at":"2026-07-21T21:20:33.805038+00:00"},{"id":"AGENTSCORE-2026-0081","package":"mcp-dataverse","old_version":"0.7.5","new_version":"0.7.6","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: alitgz","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"mcp-dataverse updated from 0.7.5 to 0.7.6. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-07-21T14:18:17.871+00:00","published_at":"2026-07-21T14:18:17.942699+00:00"},{"id":"AGENTSCORE-2026-0080","package":"code-auditor-mcp","old_version":"2.6.2","new_version":"3.0.0","old_score":95,"new_score":90,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/dist/auditRunner.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.resolve, sanitizer:${handoffRemaining.length})","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.resolve","${handoffRemaining.length}"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: bhammond","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"code-auditor-mcp updated from 2.6.2 to 3.0.0. Score changed 95/100 to 90/100 (-5). Risk: LOW to LOW. 2 findings.","detected_at":"2026-07-18T17:00:49.399+00:00","published_at":"2026-07-18T17:00:49.675203+00:00"},{"id":"AGENTSCORE-2026-0079","package":"prism-mcp-server","old_version":"20.0.6","new_version":"20.0.7","old_score":85,"new_score":65,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"excessive_dependencies","detail":"Package has 24 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/auth.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: dmitricostenco","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"prism-mcp-server updated from 20.0.6 to 20.0.7. Score changed 85/100 to 65/100 (-20). Risk: LOW to ELEVATED. 3 findings.","detected_at":"2026-07-18T13:14:18.108+00:00","published_at":"2026-07-18T13:14:18.171017+00:00"},{"id":"AGENTSCORE-2026-0078","package":"metaharness","old_version":"0.3.1","new_version":"0.3.2","old_score":90,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/meta-proxy.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: ruvnet","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"metaharness updated from 0.3.1 to 0.3.2. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-07-17T17:14:17.783+00:00","published_at":"2026-07-17T17:14:18.031041+00:00"},{"id":"AGENTSCORE-2026-0077","package":"termyte","old_version":"1.0.0","new_version":"1.0.2","old_score":90,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"file":"package/dist/indexing/memory-vec-index.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:.exec(`\n        CREATE, sanitizer:db.exec()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":[".exec(`\n        CREATE","db.exec(","${vector.length}"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: palguna26","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"termyte updated from 1.0.0 to 1.0.2. Score changed 90/100 to 80/100 (-10). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-07-13T02:20:55.26+00:00","published_at":"2026-07-13T02:20:55.515229+00:00"},{"id":"AGENTSCORE-2026-0076","package":"nlobby-cli","old_version":"1.5.0","new_version":"1.6.0","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/dist/index.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input (downgraded — mitigators detected in scope: test_fixture:test()","severity":"low","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead.","mitigators_detected":["test("],"mitigation_categories":["test_fixture"],"severity_downgraded_from":"high"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"nlobby-cli updated from 1.5.0 to 1.6.0. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-07-12T00:20:57.786+00:00","published_at":"2026-07-12T00:20:58.026896+00:00"},{"id":"AGENTSCORE-2026-0075","package":"aiwg","old_version":"2026.7.9","new_version":"2026.7.10","old_score":100,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/src/config/cli.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"aiwg updated from 2026.7.9 to 2026.7.10. Score changed 100/100 to 80/100 (-20). Risk: LOW to MODERATE. 1 finding.","detected_at":"2026-07-04T23:38:15.024+00:00","published_at":"2026-07-04T23:38:15.262058+00:00"},{"id":"AGENTSCORE-2026-0074","package":"ucn","old_version":"4.0.2","new_version":"4.1.0","old_score":90,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/core/stacktrace.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: mleoca","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"ucn updated from 4.0.2 to 4.1.0. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-07-03T09:28:15.24+00:00","published_at":"2026-07-03T09:28:15.311107+00:00"},{"id":"AGENTSCORE-2026-0073","package":"@meta-quest/hzdb","old_version":"1.2.1","new_version":"1.3.1","old_score":90,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node -e \"require('@meta-quest/metavr/postinstall.js')\"","severity":"high","recommendation":"Review the install script for network calls or code execution"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: zbowling","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@meta-quest/hzdb updated from 1.2.1 to 1.3.1. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-06-30T21:08:12.87+00:00","published_at":"2026-06-30T21:08:13.119064+00:00"}],"total":50,"feed_url":"https://agentscores.xyz/security/advisories/rss.xml"}