{"generated_at":"2026-09-06T03:19:01.934Z","report_title":"State of MCP Package Security: April 2026","monitoring":{"packages_monitored":1747,"scans_total":57279,"latest_watch_update_at":"2026-09-06T03:18:14.246+00:00","scanner_version":"2.2"},"scores":{"sample_size":1000,"mean":92.4,"median":95,"distribution":{"90-100":799,"80-89":140,"70-79":41,"60-69":15,"50-59":3,"40-49":2,"30-39":0,"20-29":0,"10-19":0,"0-9":0},"bucket_order":["90-100","80-89","70-79","60-69","50-59","40-49","30-39","20-29","10-19","0-9"]},"risk":{"distribution":{"LOW":912,"MODERATE":68,"ELEVATED":18,"HIGH":2,"CRITICAL":0},"order":["LOW","MODERATE","ELEVATED","HIGH","CRITICAL"]},"findings":{"sample_size":500,"scans_in_sample_with_findings":386,"scans_in_sample_without_findings":114,"total_in_sample":557,"by_type":{"no_provenance":337,"command_injection":66,"no_repository":59,"install_script":55,"excessive_dependencies":15,"unsafe_eval":15,"hardcoded_secret":4,"no_license":4,"sensitive_file_access":1,"poor_description":1},"by_severity":{"critical":2,"high":31,"medium":76,"low":448}},"capabilities":{"sample_size":543,"by_type":{"unknown":522,"search_index":290,"database_access":187,"network_egress":179,"email_messaging":140,"secrets_access":140,"filesystem_read":114,"memory_state":86,"browser_automation":78,"repo_read":77,"cloud_infra":76,"filesystem_write":68,"shell_exec":32,"repo_write":19,"code_analysis":9}},"install_scripts":{"sample_size":905,"present":72,"absent":833,"rate":0.08},"advisories":{"total":120,"by_severity":{"critical":2,"high":68,"medium":0,"low":50},"recent":[{"package":"md-redline","severity":"high","published_at":"2026-08-28T21:28:19.872927+00:00"},{"package":"hive-intelligence","severity":"low","published_at":"2026-08-29T18:00:51.796899+00:00"},{"package":"@cyanheads/git-mcp-server","severity":"high","published_at":"2026-08-29T20:10:30.23142+00:00"},{"package":"slashvibe-mcp","severity":"low","published_at":"2026-09-01T01:40:25.150747+00:00"},{"package":"@mrrlin-dev/external-agents","severity":"low","published_at":"2026-09-01T21:30:38.482256+00:00"},{"package":"@sidebutton/server","severity":"high","published_at":"2026-09-02T04:30:37.426507+00:00"},{"package":"@agent360/browser-mcp","severity":"high","published_at":"2026-09-02T06:46:21.799608+00:00"},{"package":"axm.sh","severity":"low","published_at":"2026-09-02T10:40:35.843218+00:00"},{"package":"@yawlabs/mcp","severity":"high","published_at":"2026-09-03T00:46:17.080087+00:00"},{"package":"google-tools-mcp","severity":"low","published_at":"2026-09-05T15:52:20.086653+00:00"}]},"lowest_scoring_packages":[{"package":"@stackmemoryai/stackmemory","score":40,"risk":"HIGH","version":"1.14.0"},{"package":"fa-mcp-sdk","score":45,"risk":"HIGH","version":"0.12.96"},{"package":"claude-flow","score":45,"risk":"HIGH","version":"3.38.21"},{"package":"brave-real-browser-mcp-server","score":50,"risk":"ELEVATED","version":"2.45.29"},{"package":"mneme-ai","score":50,"risk":"ELEVATED","version":"3.153.0"},{"package":"pythia-lcs","score":55,"risk":"ELEVATED","version":"3.1.0"},{"package":"vidlens-mcp","score":55,"risk":"ELEVATED","version":"1.5.1"},{"package":"perp-cli","score":55,"risk":"ELEVATED","version":"0.12.17"},{"package":"memoir-cli","score":55,"risk":"ELEVATED","version":"3.12.0"},{"package":"code-auditor-mcp","score":55,"risk":"ELEVATED","version":"3.4.17"}],"notes":{"findings_sample":"Findings aggregates reflect the most recent 500 scans rather than all scans on record, to avoid double-counting repeat scans of the same package.","severity_downgrade":"Severity values reflect scanner v2.2 context-aware downgrade: findings flagged by regex but with a detected sanitizer wrapper, test-fixture, or documentation context nearby are reduced in severity with an explicit annotation.","capability_sample":"Capability counts reflect packages that have capability analysis populated on their most recent scan. Older monitored packages may not have this field yet."}}