{"generated_at":"2026-10-12T03:34:52.929Z","report_title":"State of MCP Package Security: April 2026","monitoring":{"packages_monitored":1847,"scans_total":69610,"latest_watch_update_at":"2026-10-12T03:34:13.176+00:00","scanner_version":"2.2"},"scores":{"sample_size":1000,"mean":92.1,"median":95,"distribution":{"90-100":775,"80-89":145,"70-79":55,"60-69":17,"50-59":6,"40-49":1,"30-39":1,"20-29":0,"10-19":0,"0-9":0},"bucket_order":["90-100","80-89","70-79","60-69","50-59","40-49","30-39","20-29","10-19","0-9"]},"risk":{"distribution":{"LOW":889,"MODERATE":86,"ELEVATED":23,"HIGH":2,"CRITICAL":0},"order":["LOW","MODERATE","ELEVATED","HIGH","CRITICAL"]},"findings":{"sample_size":500,"scans_in_sample_with_findings":401,"scans_in_sample_without_findings":99,"total_in_sample":576,"by_type":{"no_provenance":351,"command_injection":73,"no_repository":53,"install_script":52,"unsafe_eval":18,"excessive_dependencies":13,"no_license":6,"hardcoded_secret":4,"poor_description":2,"prompt_injection_pattern":2,"sensitive_file_access":2},"by_severity":{"critical":2,"high":52,"medium":70,"low":452}},"capabilities":{"sample_size":543,"by_type":{"unknown":510,"search_index":271,"network_egress":188,"database_access":168,"email_messaging":140,"secrets_access":140,"filesystem_read":106,"browser_automation":83,"memory_state":81,"cloud_infra":78,"repo_read":71,"filesystem_write":68,"shell_exec":27,"repo_write":16,"code_analysis":10}},"install_scripts":{"sample_size":918,"present":64,"absent":854,"rate":0.07},"advisories":{"total":164,"by_severity":{"critical":2,"high":99,"medium":0,"low":63},"recent":[{"package":"@portel/photon","severity":"low","published_at":"2026-10-07T02:20:38.795356+00:00"},{"package":"mindpm","severity":"low","published_at":"2026-10-07T03:50:35.196446+00:00"},{"package":"@cachly-dev/mcp-server","severity":"high","published_at":"2026-10-07T10:01:01.456729+00:00"},{"package":"rea-agents","severity":"high","published_at":"2026-10-07T17:36:24.917447+00:00"},{"package":"summer-engine","severity":"high","published_at":"2026-10-07T19:40:39.616202+00:00"},{"package":"rea-agents","severity":"high","published_at":"2026-10-09T17:00:58.44243+00:00"},{"package":"cbrowser","severity":"high","published_at":"2026-10-09T17:28:15.852649+00:00"},{"package":"cbrowser","severity":"high","published_at":"2026-10-09T23:30:42.665867+00:00"},{"package":"agentpack-cli","severity":"high","published_at":"2026-10-10T12:22:14.934572+00:00"},{"package":"@cachly-dev/mcp-server","severity":"high","published_at":"2026-10-10T21:28:15.726399+00:00"}]},"lowest_scoring_packages":[{"package":"fa-mcp-sdk","score":30,"risk":"HIGH","version":"0.12.96"},{"package":"@stackmemoryai/stackmemory","score":40,"risk":"HIGH","version":"1.14.0"},{"package":"claude-flow","score":45,"risk":"HIGH","version":"3.55.0"},{"package":"@kenkaiiii/queen-mcp","score":45,"risk":"HIGH","version":"3.29.0"},{"package":"brave-real-browser-mcp-server","score":50,"risk":"ELEVATED","version":"2.45.29"},{"package":"engram-wiki-mcp","score":50,"risk":"ELEVATED","version":"0.0.28"},{"package":"mneme-ai","score":50,"risk":"ELEVATED","version":"3.153.0"},{"package":"perp-cli","score":55,"risk":"ELEVATED","version":"0.12.17"},{"package":"summer-engine","score":55,"risk":"ELEVATED","version":"3.5.2"},{"package":"clearotron","score":55,"risk":"ELEVATED","version":"0.4.0"}],"notes":{"findings_sample":"Findings aggregates reflect the most recent 500 scans rather than all scans on record, to avoid double-counting repeat scans of the same package.","severity_downgrade":"Severity values reflect scanner v2.2 context-aware downgrade: findings flagged by regex but with a detected sanitizer wrapper, test-fixture, or documentation context nearby are reduced in severity with an explicit annotation.","capability_sample":"Capability counts reflect packages that have capability analysis populated on their most recent scan. Older monitored packages may not have this field yet."}}