Benign javascript Download

@unclick/mcp-server 0.3.132

“UnClick gives MCP-compatible agents 667 customer-visible apps and 1588 actions, plus persistent cross-session memory.”

Archive entry has excessively long name (258 bytes)Detects indicators in server logs that indicate an exploitation attempt of CVE-2021-44228
SHA-256676ab1f3a92601b839c86cdafd23e59ae4f8a61eee3dbffa45e610cce920f725
URLhttps://registry.npmjs.org/@unclick/mcp-server/-/mcp-server-0.3.132.tgz
MaleculeMdTh

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.