{"advisories":[{"id":"AGENTSCORE-2026-0088","package":"real-browser-mcp-server","old_version":"2.0.10","new_version":"2.2.2","old_score":85,"new_score":60,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/setup-browser.js","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"file":"package/dist/src/mcp/handlers/network-extractors.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: codeiva","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"real-browser-mcp-server updated from 2.0.10 to 2.2.2. Score changed 85/100 to 60/100 (-25). Risk: LOW to ELEVATED. 4 findings.","detected_at":"2026-07-24T23:40:32.115+00:00","published_at":"2026-07-24T23:40:32.21341+00:00"},{"id":"AGENTSCORE-2026-0087","package":"code-auditor-mcp","old_version":"3.0.0","new_version":"3.1.1","old_score":90,"new_score":70,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/auditRunner.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.resolve, sanitizer:${handoffRemaining.length})","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.resolve","${handoffRemaining.length}"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"file":"package/dist/cli.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: bhammond","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"code-auditor-mcp updated from 3.0.0 to 3.1.1. Score changed 90/100 to 70/100 (-20). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-07-24T00:40:35.127+00:00","published_at":"2026-07-24T00:40:35.371657+00:00"},{"id":"AGENTSCORE-2026-0086","package":"@respira/wordpress-mcp-server","old_version":"7.6.1","new_version":"7.6.2","old_score":75,"new_score":65,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"file":"package/dist/agent-signature.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: mihai_respira","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@respira/wordpress-mcp-server updated from 7.6.1 to 7.6.2. Score changed 75/100 to 65/100 (-10). Risk: MODERATE to ELEVATED. 3 findings.","detected_at":"2026-07-23T21:28:16.922+00:00","published_at":"2026-07-23T21:28:17.005088+00:00"},{"id":"AGENTSCORE-2026-0085","package":"aiwg","old_version":"2026.7.16","new_version":"2026.7.17","old_score":100,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/src/config/cli.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"aiwg updated from 2026.7.16 to 2026.7.17. Score changed 100/100 to 80/100 (-20). Risk: LOW to MODERATE. 1 finding.","detected_at":"2026-07-23T03:52:20.186+00:00","published_at":"2026-07-23T03:52:20.2688+00:00"},{"id":"AGENTSCORE-2026-0084","package":"tribunal-kit","old_version":"5.8.2","new_version":"5.8.4","old_score":85,"new_score":70,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/commands/optimize.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"file":"package/.agent/scripts/inner_loop_validator.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input (downgraded — mitigators detected in scope: sanitizer:__dirname)","severity":"low","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead.","mitigators_detected":["__dirname"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: harmit_.3","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"tribunal-kit updated from 5.8.2 to 5.8.4. Score changed 85/100 to 70/100 (-15). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-07-22T17:00:55.547+00:00","published_at":"2026-07-22T17:00:55.8102+00:00"},{"id":"AGENTSCORE-2026-0083","package":"agent-security-scanner-mcp","old_version":"4.5.1","new_version":"4.5.2","old_score":85,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall.js","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/src/fix-patterns.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:sanitize, sanitizer:execFile)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["sanitize","execFile"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"file":"package/benchmarks/corpus/javascript_injection.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input (downgraded — mitigators detected in scope: sanitizer:execFile, sanitizer:spawn(\"bash\", [)","severity":"low","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead.","mitigators_detected":["execFile","spawn(\"bash\", ["],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: prooflayer","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"agent-security-scanner-mcp updated from 4.5.1 to 4.5.2. Score changed 85/100 to 80/100 (-5). Risk: LOW to MODERATE. 4 findings.","detected_at":"2026-07-22T03:04:16.614+00:00","published_at":"2026-07-22T03:04:16.674575+00:00"},{"id":"AGENTSCORE-2026-0082","package":"patchwork-os","old_version":"1.1.0-beta.3","new_version":"1.1.0-beta.4","old_score":90,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall.mjs || true","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/dist/index.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:execFile, sanitizer:path.join)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["execFile","path.join"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: oolab-labs","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"patchwork-os updated from 1.1.0-beta.3 to 1.1.0-beta.4. Score changed 90/100 to 85/100 (-5). Risk: LOW to LOW. 3 findings.","detected_at":"2026-07-21T21:20:33.53+00:00","published_at":"2026-07-21T21:20:33.805038+00:00"},{"id":"AGENTSCORE-2026-0081","package":"mcp-dataverse","old_version":"0.7.5","new_version":"0.7.6","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: alitgz","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"mcp-dataverse updated from 0.7.5 to 0.7.6. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-07-21T14:18:17.871+00:00","published_at":"2026-07-21T14:18:17.942699+00:00"},{"id":"AGENTSCORE-2026-0080","package":"code-auditor-mcp","old_version":"2.6.2","new_version":"3.0.0","old_score":95,"new_score":90,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/dist/auditRunner.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.resolve, sanitizer:${handoffRemaining.length})","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.resolve","${handoffRemaining.length}"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: bhammond","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"code-auditor-mcp updated from 2.6.2 to 3.0.0. Score changed 95/100 to 90/100 (-5). Risk: LOW to LOW. 2 findings.","detected_at":"2026-07-18T17:00:49.399+00:00","published_at":"2026-07-18T17:00:49.675203+00:00"},{"id":"AGENTSCORE-2026-0079","package":"prism-mcp-server","old_version":"20.0.6","new_version":"20.0.7","old_score":85,"new_score":65,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"excessive_dependencies","detail":"Package has 24 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/auth.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: dmitricostenco","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"prism-mcp-server updated from 20.0.6 to 20.0.7. Score changed 85/100 to 65/100 (-20). Risk: LOW to ELEVATED. 3 findings.","detected_at":"2026-07-18T13:14:18.108+00:00","published_at":"2026-07-18T13:14:18.171017+00:00"},{"id":"AGENTSCORE-2026-0078","package":"metaharness","old_version":"0.3.1","new_version":"0.3.2","old_score":90,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/meta-proxy.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: ruvnet","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"metaharness updated from 0.3.1 to 0.3.2. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-07-17T17:14:17.783+00:00","published_at":"2026-07-17T17:14:18.031041+00:00"},{"id":"AGENTSCORE-2026-0077","package":"termyte","old_version":"1.0.0","new_version":"1.0.2","old_score":90,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"file":"package/dist/indexing/memory-vec-index.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:.exec(`\n        CREATE, sanitizer:db.exec()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":[".exec(`\n        CREATE","db.exec(","${vector.length}"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: palguna26","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"termyte updated from 1.0.0 to 1.0.2. Score changed 90/100 to 80/100 (-10). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-07-13T02:20:55.26+00:00","published_at":"2026-07-13T02:20:55.515229+00:00"},{"id":"AGENTSCORE-2026-0076","package":"nlobby-cli","old_version":"1.5.0","new_version":"1.6.0","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/dist/index.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input (downgraded — mitigators detected in scope: test_fixture:test()","severity":"low","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead.","mitigators_detected":["test("],"mitigation_categories":["test_fixture"],"severity_downgraded_from":"high"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"nlobby-cli updated from 1.5.0 to 1.6.0. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-07-12T00:20:57.786+00:00","published_at":"2026-07-12T00:20:58.026896+00:00"},{"id":"AGENTSCORE-2026-0075","package":"aiwg","old_version":"2026.7.9","new_version":"2026.7.10","old_score":100,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/src/config/cli.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"aiwg updated from 2026.7.9 to 2026.7.10. Score changed 100/100 to 80/100 (-20). Risk: LOW to MODERATE. 1 finding.","detected_at":"2026-07-04T23:38:15.024+00:00","published_at":"2026-07-04T23:38:15.262058+00:00"},{"id":"AGENTSCORE-2026-0074","package":"ucn","old_version":"4.0.2","new_version":"4.1.0","old_score":90,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/core/stacktrace.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: mleoca","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"ucn updated from 4.0.2 to 4.1.0. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-07-03T09:28:15.24+00:00","published_at":"2026-07-03T09:28:15.311107+00:00"},{"id":"AGENTSCORE-2026-0073","package":"@meta-quest/hzdb","old_version":"1.2.1","new_version":"1.3.1","old_score":90,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node -e \"require('@meta-quest/metavr/postinstall.js')\"","severity":"high","recommendation":"Review the install script for network calls or code execution"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: zbowling","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@meta-quest/hzdb updated from 1.2.1 to 1.3.1. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-06-30T21:08:12.87+00:00","published_at":"2026-06-30T21:08:13.119064+00:00"},{"id":"AGENTSCORE-2026-0072","package":"@firfi/huly-mcp","old_version":"0.44.0","new_version":"0.44.3","old_score":90,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"type":"excessive_dependencies","detail":"Package has 21 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/index.cjs","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:.exec(`\n      PRAGMA, sanitizer:db.exec()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":[".exec(`\n      PRAGMA","db.exec(","${VERSION2}"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: firfi","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@firfi/huly-mcp updated from 0.44.0 to 0.44.3. Score changed 90/100 to 80/100 (-10). Risk: LOW to MODERATE. 3 findings.","detected_at":"2026-06-30T18:30:58.364+00:00","published_at":"2026-06-30T18:30:58.451824+00:00"},{"id":"AGENTSCORE-2026-0071","package":"slashvibe-mcp","old_version":"0.4.10","new_version":"0.5.0","old_score":90,"new_score":65,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"file":"package/tools/_work-context.manual-test.js","type":"hardcoded_secret","detail":"Hardcoded secret found (AWS key, OpenAI key, GitHub token, or npm token) (downgraded — mitigators detected in scope: test_fixture:// TEST, test_fixture:abcdef)","severity":"medium","recommendation":"Remove hardcoded secrets. Use environment variables instead.","mitigators_detected":["// TEST","abcdef"],"mitigation_categories":["test_fixture"],"severity_downgraded_from":"critical"},{"file":"package/tools/lib/git-apply.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: brightseth","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"slashvibe-mcp updated from 0.4.10 to 0.5.0. Score changed 90/100 to 65/100 (-25). Risk: LOW to ELEVATED. 3 findings.","detected_at":"2026-06-27T16:50:24.423+00:00","published_at":"2026-06-27T16:50:24.480579+00:00"},{"id":"AGENTSCORE-2026-0070","package":"@taprun/spec","old_version":"1.2.0","new_version":"1.6.0","old_score":95,"new_score":75,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/lint.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: leonting1010","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@taprun/spec updated from 1.2.0 to 1.6.0. Score changed 95/100 to 75/100 (-20). Risk: LOW to MODERATE. 2 findings.","detected_at":"2026-06-25T04:10:25.996+00:00","published_at":"2026-06-25T04:10:26.060963+00:00"},{"id":"AGENTSCORE-2026-0069","package":"@proofofwork-agency/contextrelay","old_version":"3.7.0","new_version":"3.8.0","old_score":85,"new_score":65,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall.cjs","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"type":"install_script","detail":"Package has 'preuninstall' script: node scripts/preuninstall.cjs","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/dist/cli.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: proofofworkagency","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@proofofwork-agency/contextrelay updated from 3.7.0 to 3.8.0. Score changed 85/100 to 65/100 (-20). Risk: LOW to ELEVATED. 4 findings.","detected_at":"2026-06-24T22:00:47.852+00:00","published_at":"2026-06-24T22:00:47.930206+00:00"},{"id":"AGENTSCORE-2026-0068","package":"@unerr-ai/unerr","old_version":"0.3.2","new_version":"0.3.4","old_score":65,"new_score":60,"old_risk":"ELEVATED","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: test -d vendor/contracts/src && NODE_AUTH_TOKEN=${NODE_AUTH_TOKEN:-} pnpm -C vendor/contracts install --ignore-workspace --prefer-offline && NODE_AUTH_TOKEN=${NODE_AUTH_TOKEN:-} pnpm -C vendor/contrac","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"type":"excessive_dependencies","detail":"Package has 40 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/cli.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: jaswanth-unerr","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@unerr-ai/unerr updated from 0.3.2 to 0.3.4. Score changed 65/100 to 60/100 (-5). Risk: ELEVATED to ELEVATED. 4 findings.","detected_at":"2026-06-22T15:50:41.817+00:00","published_at":"2026-06-22T15:50:42.076101+00:00"},{"id":"AGENTSCORE-2026-0067","package":"metaharness","old_version":"0.1.15","new_version":"0.2.5","old_score":95,"new_score":90,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/dist/with-wasm.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:__dirname, sanitizer:${JSON.stringify()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["__dirname","${JSON.stringify(","it ("],"mitigation_categories":["sanitizer","test_fixture"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: ruvnet","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"metaharness updated from 0.1.15 to 0.2.5. Score changed 95/100 to 90/100 (-5). Risk: LOW to LOW. 2 findings.","detected_at":"2026-06-22T10:40:34.141+00:00","published_at":"2026-06-22T10:40:34.217107+00:00"},{"id":"AGENTSCORE-2026-0066","package":"@mseep/obsidian-mcp-server","old_version":"1.5.8","new_version":"1.0.0","old_score":95,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: skydeckai","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@mseep/obsidian-mcp-server updated from 1.5.8 to 1.0.0. Score changed 95/100 to 85/100 (-10). Risk: LOW to LOW. 2 findings.","detected_at":"2026-06-22T06:54:14.245+00:00","published_at":"2026-06-22T06:54:14.309556+00:00"},{"id":"AGENTSCORE-2026-0065","package":"@unerr-ai/unerr","old_version":"0.2.12","new_version":"0.3.2","old_score":80,"new_score":65,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"excessive_dependencies","detail":"Package has 39 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/cli.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: jaswanth-unerr","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@unerr-ai/unerr updated from 0.2.12 to 0.3.2. Score changed 80/100 to 65/100 (-15). Risk: MODERATE to ELEVATED. 3 findings.","detected_at":"2026-06-17T17:00:59.75+00:00","published_at":"2026-06-17T17:01:00.008581+00:00"},{"id":"AGENTSCORE-2026-0064","package":"infrawise","old_version":"0.10.3","new_version":"0.12.4","old_score":90,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"excessive_dependencies","detail":"Package has 28 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/cli/utils.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.join)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.join"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"infrawise updated from 0.10.3 to 0.12.4. Score changed 90/100 to 85/100 (-5). Risk: LOW to LOW. 2 findings.","detected_at":"2026-06-17T04:10:34.335+00:00","published_at":"2026-06-17T04:10:34.567554+00:00"},{"id":"AGENTSCORE-2026-0063","package":"@diagrammo/dgmo-mcp","old_version":"0.2.3","new_version":"0.2.6","old_score":95,"new_score":90,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/dist/index.mjs","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:${COPY_SCRIPT}, sanitizer:${JSON.stringify()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["${COPY_SCRIPT}","${JSON.stringify("],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: demian0311","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@diagrammo/dgmo-mcp updated from 0.2.3 to 0.2.6. Score changed 95/100 to 90/100 (-5). Risk: LOW to LOW. 2 findings.","detected_at":"2026-06-13T19:40:32.012+00:00","published_at":"2026-06-13T19:40:32.091198+00:00"},{"id":"AGENTSCORE-2026-0062","package":"squish-memory","old_version":"1.2.0","new_version":"1.6.0","old_score":90,"new_score":65,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"excessive_dependencies","detail":"Package has 21 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/core/runtime/install-diagnostics.ts","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: michielhdoteth","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"squish-memory updated from 1.2.0 to 1.6.0. Score changed 90/100 to 65/100 (-25). Risk: LOW to ELEVATED. 3 findings.","detected_at":"2026-06-10T18:46:20.561+00:00","published_at":"2026-06-10T18:46:20.635819+00:00"},{"id":"AGENTSCORE-2026-0061","package":"@mthines/reaper-mcp","old_version":"0.18.0","new_version":"0.19.0","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/main.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:__dirname, sanitizer:${MIN_PYTHON_MAJOR})","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["__dirname","${MIN_PYTHON_MAJOR}"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@mthines/reaper-mcp updated from 0.18.0 to 0.19.0. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-06-06T16:30:27.661+00:00","published_at":"2026-06-06T16:30:27.734825+00:00"},{"id":"AGENTSCORE-2026-0060","package":"codefizz-editor-agent","old_version":"2.5.0","new_version":"2.5.1","old_score":95,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: aadeshrao","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"codefizz-editor-agent updated from 2.5.0 to 2.5.1. Score changed 95/100 to 85/100 (-10). Risk: LOW to LOW. 2 findings.","detected_at":"2026-06-06T15:34:11.878+00:00","published_at":"2026-06-06T15:34:11.95079+00:00"},{"id":"AGENTSCORE-2026-0059","package":"@zereight/mcp-gitlab","old_version":"2.1.16","new_version":"2.1.18","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/build/test/test-ci-variables.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:spawn(\"node\", [, test_fixture:test()","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["spawn(\"node\", [","test("],"mitigation_categories":["sanitizer","test_fixture"],"severity_downgraded_from":"high"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@zereight/mcp-gitlab updated from 2.1.16 to 2.1.18. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-06-04T04:30:29.823+00:00","published_at":"2026-06-04T04:30:30.076919+00:00"},{"id":"AGENTSCORE-2026-0058","package":"vidlens-mcp","old_version":"1.2.9","new_version":"1.3.0","old_score":75,"new_score":55,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node -e \"console.log('\\nVidLens MCP installed. From a checkout run: npm run setup. For the global command run: npm install -g .\\n')\"","severity":"high","recommendation":"Review the install script for network calls or code execution"},{"file":"package/dist/lib/cli-runtime.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: thatsrajan","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"vidlens-mcp updated from 1.2.9 to 1.3.0. Score changed 75/100 to 55/100 (-20). Risk: MODERATE to ELEVATED. 3 findings.","detected_at":"2026-05-28T14:28:09.718+00:00","published_at":"2026-05-28T14:28:09.785717+00:00"},{"id":"AGENTSCORE-2026-0057","package":"codeloop-mcp-server","old_version":"0.1.39","new_version":"0.1.55","old_score":95,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/evidence/change_manifest.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"codeloop-mcp-server updated from 0.1.39 to 0.1.55. Score changed 95/100 to 80/100 (-15). Risk: LOW to MODERATE. 1 finding.","detected_at":"2026-05-26T20:50:18.898+00:00","published_at":"2026-05-26T20:50:19.159567+00:00"},{"id":"AGENTSCORE-2026-0056","package":"zentric-protocol-mcp","old_version":"0.1.7","new_version":"0.1.8","old_score":95,"new_score":65,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"prompt_injection_pattern","detail":"Package metadata contains prompt injection pattern: jailbreak","severity":"critical","recommendation":"Review package metadata for instructions aimed at the model rather than the user"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: zentricprotocol","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"critical","summary":"zentric-protocol-mcp updated from 0.1.7 to 0.1.8. Score changed 95/100 to 65/100 (-30). Risk: LOW to ELEVATED. 2 findings.","detected_at":"2026-05-26T18:56:09.53+00:00","published_at":"2026-05-26T18:56:09.588071+00:00"},{"id":"AGENTSCORE-2026-0055","package":"safari-mcp","old_version":"2.11.6","new_version":"2.11.8","old_score":70,"new_score":65,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall.cjs || true","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/scripts/postinstall.cjs","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.join, sanitizer:codesign)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.join","codesign"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"file":"package/extension/background.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: achiya","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"safari-mcp updated from 2.11.6 to 2.11.8. Score changed 70/100 to 65/100 (-5). Risk: MODERATE to ELEVATED. 4 findings.","detected_at":"2026-05-26T17:12:09.034+00:00","published_at":"2026-05-26T17:12:09.091835+00:00"},{"id":"AGENTSCORE-2026-0054","package":"@axon-trading/mcp","old_version":"1.13.5","new_version":"1.14.0","old_score":95,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: tytaninc7","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@axon-trading/mcp updated from 1.13.5 to 1.14.0. Score changed 95/100 to 85/100 (-10). Risk: LOW to LOW. 2 findings.","detected_at":"2026-05-25T00:00:37.398+00:00","published_at":"2026-05-25T00:00:37.481338+00:00"},{"id":"AGENTSCORE-2026-0053","package":"chrome-devtools-mcp","old_version":"0.26.0","new_version":"1.0.1","old_score":80,"new_score":60,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"file":"package/build/src/third_party/devtools-formatter-worker.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"file":"package/build/src/third_party/index.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"chrome-devtools-mcp updated from 0.26.0 to 1.0.1. Score changed 80/100 to 60/100 (-20). Risk: MODERATE to ELEVATED. 2 findings.","detected_at":"2026-05-23T02:10:17.876+00:00","published_at":"2026-05-23T02:10:17.953609+00:00"},{"id":"AGENTSCORE-2026-0052","package":"hemmabo-mcp-server","old_version":"3.2.8","new_version":"3.2.11","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: hemmabo","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"hemmabo-mcp-server updated from 3.2.8 to 3.2.11. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-05-23T00:40:17.962+00:00","published_at":"2026-05-23T00:40:18.212442+00:00"},{"id":"AGENTSCORE-2026-0051","package":"@socialneuron/mcp-server","old_version":"1.7.10","new_version":"1.7.12","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: socialneuronteam","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@socialneuron/mcp-server updated from 1.7.10 to 1.7.12. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-05-22T21:24:09.911+00:00","published_at":"2026-05-22T21:24:09.982865+00:00"},{"id":"AGENTSCORE-2026-0050","package":"beluz-qa","old_version":"0.4.0","new_version":"0.5.0","old_score":95,"new_score":90,"old_risk":"LOW","new_risk":"LOW","findings":[{"file":"package/dist/cli/doctor.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.join)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.join"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: luz.gutierrez","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"beluz-qa updated from 0.4.0 to 0.5.0. Score changed 95/100 to 90/100 (-5). Risk: LOW to LOW. 2 findings.","detected_at":"2026-05-22T20:06:09.981+00:00","published_at":"2026-05-22T20:06:10.224277+00:00"},{"id":"AGENTSCORE-2026-0049","package":"@diagrammo/dgmo-mcp","old_version":"0.1.20","new_version":"0.1.21","old_score":100,"new_score":95,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: demian0311","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@diagrammo/dgmo-mcp updated from 0.1.20 to 0.1.21. Score changed 100/100 to 95/100 (-5). Risk: LOW to LOW. 1 finding.","detected_at":"2026-05-21T02:18:09.564+00:00","published_at":"2026-05-21T02:18:09.61914+00:00"},{"id":"AGENTSCORE-2026-0048","package":"@mcp-guardian/server","old_version":"2.4.1","new_version":"2.9.0","old_score":85,"new_score":55,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall-windows.cjs","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"type":"excessive_dependencies","detail":"Package has 27 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/clients/pricing-client.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"file":"package/README.md","type":"unsafe_eval","detail":"Uses eval() with dynamic input (downgraded — mitigators detected in scope: test_fixture:.test.ts, documentation_context:```bash\n)","severity":"low","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead.","mitigators_detected":[".test.ts","```bash\n","### A"],"mitigation_categories":["test_fixture","documentation_context"],"severity_downgraded_from":"high"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: rudraneel93","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"@mcp-guardian/server updated from 2.4.1 to 2.9.0. Score changed 85/100 to 55/100 (-30). Risk: LOW to ELEVATED. 5 findings.","detected_at":"2026-05-20T19:00:37.152+00:00","published_at":"2026-05-20T19:00:37.226732+00:00"},{"id":"AGENTSCORE-2026-0047","package":"prism-mcp-server","old_version":"15.2.1","new_version":"15.4.0","old_score":85,"new_score":65,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"excessive_dependencies","detail":"Package has 23 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"file":"package/dist/auth.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: dmitricostenco","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"prism-mcp-server updated from 15.2.1 to 15.4.0. Score changed 85/100 to 65/100 (-20). Risk: LOW to ELEVATED. 3 findings.","detected_at":"2026-05-20T06:30:27.807+00:00","published_at":"2026-05-20T06:30:27.883511+00:00"},{"id":"AGENTSCORE-2026-0046","package":"mneme-ai","old_version":"2.12.0","new_version":"2.19.75","old_score":90,"new_score":50,"old_risk":"LOW","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node bin/postinstall-mneme-lite.cjs","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"type":"install_script","detail":"Package has 'preinstall' script: node -e \"try{const fs=require('node:fs');const path=require('node:path');const os=require('node:os');const{spawnSync}=require('node:child_process');const crypto=require('node:crypto');const w=process.","severity":"high","recommendation":"Review the install script for network calls or code execution"},{"file":"package/dist/commands/setup-free.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: mneme_npm","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"mneme-ai updated from 2.12.0 to 2.19.75. Score changed 90/100 to 50/100 (-40). Risk: LOW to ELEVATED. 4 findings.","detected_at":"2026-05-19T14:10:19.148+00:00","published_at":"2026-05-19T14:10:19.231778+00:00"},{"id":"AGENTSCORE-2026-0045","package":"@antv/mcp-server-antv","old_version":"0.1.8","new_version":"0.2.8","old_score":100,"new_score":90,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"install_script","detail":"Package has 'preinstall' script: bun run index.js","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: atool","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@antv/mcp-server-antv updated from 0.1.8 to 0.2.8. Score changed 100/100 to 90/100 (-10). Risk: LOW to LOW. 2 findings.","detected_at":"2026-05-19T01:58:09.673+00:00","published_at":"2026-05-19T01:58:09.896031+00:00"},{"id":"AGENTSCORE-2026-0044","package":"beecork","old_version":"1.4.9","new_version":"1.7.0","old_score":75,"new_score":70,"old_risk":"MODERATE","new_risk":"MODERATE","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall.mjs","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/dist/cli/doctor.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: lbakhia","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"beecork updated from 1.4.9 to 1.7.0. Score changed 75/100 to 70/100 (-5). Risk: MODERATE to MODERATE. 3 findings.","detected_at":"2026-05-18T16:10:18.861+00:00","published_at":"2026-05-18T16:10:19.120573+00:00"},{"id":"AGENTSCORE-2026-0043","package":"@riskstate/mcp-server","old_version":"1.0.5","new_version":"1.0.6","old_score":95,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"no_repository","detail":"Package has no repository link — source code is not verifiable","severity":"medium","recommendation":"Prefer packages with public source repositories"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: likidodefi","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"@riskstate/mcp-server updated from 1.0.5 to 1.0.6. Score changed 95/100 to 85/100 (-10). Risk: LOW to LOW. 2 findings.","detected_at":"2026-05-18T12:18:09.262+00:00","published_at":"2026-05-18T12:18:09.319186+00:00"},{"id":"AGENTSCORE-2026-0042","package":"dendrite-wiki-mcp","old_version":"0.4.0-alpha.1","new_version":"0.4.0-alpha.2","old_score":95,"new_score":85,"old_risk":"LOW","new_risk":"LOW","findings":[{"type":"excessive_dependencies","detail":"Package has 21 runtime dependencies (high attack surface)","severity":"medium","recommendation":"Prefer packages with fewer dependencies"},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: mfillalan","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"allow","severity":"low","summary":"dendrite-wiki-mcp updated from 0.4.0-alpha.1 to 0.4.0-alpha.2. Score changed 95/100 to 85/100 (-10). Risk: LOW to LOW. 2 findings.","detected_at":"2026-05-18T11:20:20.374+00:00","published_at":"2026-05-18T11:20:20.453567+00:00"},{"id":"AGENTSCORE-2026-0041","package":"safari-mcp","old_version":"2.10.10","new_version":"2.11.0","old_score":70,"new_score":65,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"install_script","detail":"Package has 'postinstall' script: node scripts/postinstall.cjs || true","severity":"low","recommendation":"Install script detected but contains no obvious network calls"},{"file":"package/scripts/postinstall.cjs","type":"command_injection","detail":"Potential command injection: shell execution with template literal input (downgraded — mitigators detected in scope: sanitizer:path.join, sanitizer:codesign)","severity":"low","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives","mitigators_detected":["path.join","codesign"],"mitigation_categories":["sanitizer"],"severity_downgraded_from":"high"},{"file":"package/extension/background.js","type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: achiya","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"safari-mcp updated from 2.10.10 to 2.11.0. Score changed 70/100 to 65/100 (-5). Risk: MODERATE to ELEVATED. 4 findings.","detected_at":"2026-05-18T06:30:23.233+00:00","published_at":"2026-05-18T06:30:23.286774+00:00"},{"id":"AGENTSCORE-2026-0040","package":"aiwg","old_version":"2026.5.7","new_version":"2026.5.8","old_score":95,"new_score":80,"old_risk":"LOW","new_risk":"MODERATE","findings":[{"file":"package/dist/src/config/cli.js","type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"aiwg updated from 2026.5.7 to 2026.5.8. Score changed 95/100 to 80/100 (-15). Risk: LOW to MODERATE. 1 finding.","detected_at":"2026-05-18T05:24:11.014+00:00","published_at":"2026-05-18T05:24:11.068931+00:00"},{"id":"AGENTSCORE-2026-0039","package":"openchrome-mcp","old_version":"1.10.4","new_version":"1.12.2","old_score":75,"new_score":55,"old_risk":"MODERATE","new_risk":"ELEVATED","findings":[{"type":"command_injection","detail":"Potential command injection: shell execution with template literal input","severity":"high","recommendation":"Sanitise all inputs to shell commands or use parameterised alternatives"},{"type":"unsafe_eval","detail":"Uses eval() with dynamic input","severity":"high","recommendation":"Avoid eval with variables. Use JSON.parse or structured dispatch instead."},{"type":"no_provenance","detail":"Package is not published with provenance attestations or trusted publishing. Published by: shaun0927","severity":"low","recommendation":"Enable npm provenance via GitHub Actions to provide a verifiable build-to-publish chain"}],"affected_servers":[],"verdict":"warn","severity":"high","summary":"openchrome-mcp updated from 1.10.4 to 1.12.2. Score changed 75/100 to 55/100 (-20). Risk: MODERATE to ELEVATED. 3 findings.","detected_at":"2026-05-16T00:00:36.824+00:00","published_at":"2026-05-16T00:00:37.074815+00:00"}],"total":50,"feed_url":"https://agentscores.xyz/security/advisories/rss.xml"}