{"generated_at":"2026-08-10T18:53:22.812Z","report_title":"State of MCP Package Security: April 2026","monitoring":{"packages_monitored":1676,"scans_total":48207,"latest_watch_update_at":"2026-08-10T18:52:17.247+00:00","scanner_version":"2.2"},"scores":{"sample_size":1000,"mean":92,"median":95,"distribution":{"90-100":781,"80-89":146,"70-79":51,"60-69":14,"50-59":6,"40-49":2,"30-39":0,"20-29":0,"10-19":0,"0-9":0},"bucket_order":["90-100","80-89","70-79","60-69","50-59","40-49","30-39","20-29","10-19","0-9"]},"risk":{"distribution":{"LOW":901,"MODERATE":77,"ELEVATED":20,"HIGH":2,"CRITICAL":0},"order":["LOW","MODERATE","ELEVATED","HIGH","CRITICAL"]},"findings":{"sample_size":500,"scans_in_sample_with_findings":399,"scans_in_sample_without_findings":101,"total_in_sample":605,"by_type":{"no_provenance":371,"no_repository":88,"command_injection":72,"install_script":38,"unsafe_eval":14,"excessive_dependencies":10,"no_license":7,"sensitive_file_access":2,"hardcoded_secret":1,"poor_description":1,"prompt_injection_pattern":1},"by_severity":{"critical":2,"high":47,"medium":98,"low":458}},"capabilities":{"sample_size":560,"by_type":{"unknown":535,"search_index":319,"network_egress":201,"database_access":198,"secrets_access":152,"email_messaging":151,"filesystem_read":116,"memory_state":107,"cloud_infra":87,"browser_automation":85,"repo_read":81,"filesystem_write":72,"shell_exec":29,"repo_write":22,"code_analysis":13}},"install_scripts":{"sample_size":878,"present":64,"absent":814,"rate":0.073},"advisories":{"total":99,"by_severity":{"critical":2,"high":59,"medium":0,"low":38},"recent":[{"package":"safari-mcp","severity":"high","published_at":"2026-07-28T16:04:16.961083+00:00"},{"package":"code-auditor-mcp","severity":"high","published_at":"2026-07-29T09:20:32.902637+00:00"},{"package":"@mentu/metamcp","severity":"high","published_at":"2026-07-30T02:04:15.853073+00:00"},{"package":"@firfi/huly-mcp","severity":"high","published_at":"2026-07-31T14:50:39.032062+00:00"},{"package":"@apso/cli","severity":"low","published_at":"2026-07-31T16:10:36.509866+00:00"},{"package":"@pushary/agent-hooks","severity":"high","published_at":"2026-08-01T01:40:34.286187+00:00"},{"package":"rea-agents","severity":"low","published_at":"2026-08-03T18:10:31.713238+00:00"},{"package":"beecork","severity":"low","published_at":"2026-08-07T21:48:16.287824+00:00"},{"package":"mojulo","severity":"low","published_at":"2026-08-08T00:01:05.566996+00:00"},{"package":"real-browser-mcp-server","severity":"high","published_at":"2026-08-10T04:40:36.531135+00:00"}]},"lowest_scoring_packages":[{"package":"@stackmemoryai/stackmemory","score":40,"risk":"HIGH","version":"1.14.0"},{"package":"fa-mcp-sdk","score":45,"risk":"HIGH","version":"0.12.96"},{"package":"mneme-ai","score":50,"risk":"ELEVATED","version":"3.153.0"},{"package":"brave-real-browser-mcp-server","score":50,"risk":"ELEVATED","version":"2.45.29"},{"package":"code-auditor-mcp","score":55,"risk":"ELEVATED","version":"3.4.12"},{"package":"memoir-cli","score":55,"risk":"ELEVATED","version":"3.11.3"},{"package":"vidlens-mcp","score":55,"risk":"ELEVATED","version":"1.4.1"},{"package":"pythia-lcs","score":55,"risk":"ELEVATED","version":"3.1.0"},{"package":"claude-flow","score":55,"risk":"ELEVATED","version":"3.36.0"},{"package":"perp-cli","score":55,"risk":"ELEVATED","version":"0.12.17"}],"notes":{"findings_sample":"Findings aggregates reflect the most recent 500 scans rather than all scans on record, to avoid double-counting repeat scans of the same package.","severity_downgrade":"Severity values reflect scanner v2.2 context-aware downgrade: findings flagged by regex but with a detected sanitizer wrapper, test-fixture, or documentation context nearby are reduced in severity with an explicit annotation.","capability_sample":"Capability counts reflect packages that have capability analysis populated on their most recent scan. Older monitored packages may not have this field yet."}}