Supply chain
Every package in the VerifyMCP catalogue that a supply-chain scanner has flagged for malware, currently or in the past. A critical verdict caps that component's trust score at 0, so these are the servers to look at before you install anything.
Covering the last 90 days, which is how long we keep the per-check records this page is built from. Last scan represented here: 13 Sept 2026.
A scanner matched these packages against known malicious code, and no later scan has cleared them. Treat them as unsafe to install until the finding is cleared. Check the last-checked date on each row: a package that has stopped being rescored keeps its last verdict rather than gaining a new one.
io.github.Octonove/crbro-memory
Indicators malware:Q5T3CmHUkcbKSCAR_1bmKSaWLNSui2neNiog6DVezsgY (malware, first seen 11 Sept 2026)
Every indicator behind these came from a language model reading the package, not from a malware signature. That is a reason to look closely before installing, not a detection. Our scoring caps a suspicion below a confirmed finding for the same reason, and it can never floor a package to a failed verdict on its own.
SSH Session MCP
Indicators gptMalware:QLasNv5q7c1C33FevxWzdYObX2-pxd5FrZj31lpYSJ2U (LLM suspicion, first seen 5 Sept 2026)
io.github.groupdocs-annotation/groupdocs-annotation-mcp
Indicators gptMalware:QtFT3nN6-rB9wStH6upOxe1b2QPk4zXWDyTwNzfXpxqw (LLM suspicion, first seen 4 Sept 2026)
io.github.jyswee/canvasaas
Indicators gptMalware:QI_yxQWhlge7unmEViq21OPcZ220Ya_Cyg7P0xnPBQrE (LLM suspicion) · gptMalware:Qah5yhmdxp0hmwoC8GvJy-kZrhVlVPcuzNah1E4WGMM0 (LLM suspicion)
io.github.jyswee/comiceditorial
Indicators gptMalware:QhNqc9-zYrDh0Zxjw31xw1VUITUyFBsx_BEw6v7tTWrg (LLM suspicion) · gptMalware:Qmqyl9o_AnYZOhPWW23a208Ic3nyJRAhR0oMEmmwNZLE (LLM suspicion) · gptMalware:QpfGjGVl0iKLHY5E2mzr_7yysoSCB9gnjydYO4kyygRY (LLM suspicion) · gptMalware:Qz_B2fkt9-Dsq75FJhul2kRDTjRQrSeF4S0_gR4cmFP8 (LLM suspicion)
io.github.jyswee/sslwebsites
Indicators gptMalware:QfENE8On7lDi42H1ptBP8OSwRNSptzfAqQYpwif8tsBg (LLM suspicion, first seen 14 Aug 2026)
Jaxonomy — hybrid dynamical systems on JAX
Indicators gptMalware:QapWusFJREN3gWyT1CdNioj5oVS2HDAM8iyEkFXmL-FU (LLM suspicion, first seen 21 Aug 2026) · gptMalware:QhNn5f1zqRlWl1RqcSIsGsOA7oE0SRJLB1TBimDZHmxQ (LLM suspicion, first seen 21 Aug 2026)
once
Indicators gptMalware:QL3IHVIdmDjegL6EDbbQYXn7KL9ApHYlr0NpjACyoO5g (LLM suspicion, first seen 10 Aug 2026) · gptMalware:QNcC-Q9yN9ZiS9uHT23gXcWQ3uSz3wjxhy5Jd-ISO-3A (LLM suspicion, first seen 10 Aug 2026)
SQL Benchmarks Lab
Indicators gptMalware:Qe8sIWLFN-XHSZNhxHY_oMwtXixFzRD2jBNf3WckPHbQ (LLM suspicion)
io.github.mobabur94/hammerspoon
Indicators gptMalware:QeROj185xGbj0utPpA8HrCBaISdlioqXDwJ6OeB4wn90 (LLM suspicion)
io.github.Atharva-Jayappa/blast-scope
Indicators gptMalware:QVviteZGPdrRTlbuKGaKTXg3U8jpf6vmKmztNUM410AE (LLM suspicion, first seen 8 Aug 2026)
io.github.jyswee/weselltours
Indicators gptMalware:QDVmSj9NtJYg_jvP9rDmyLB2L771JmYZiSyXeiZvpeBo (LLM suspicion)
io.github.Mrshahidali420/gsc-indexer-mcp
Indicators gptMalware:QIiwsfk4V06ne1XE2MuKpW4bTTR9x2dy8D6_E-QRA3To (LLM suspicion, first seen 8 Aug 2026) · gptMalware:QQUuRkry1vc67JElwJDQj1HqvUA6buLuvVjAIDgRvqs0 (LLM suspicion, first seen 8 Aug 2026)
argot
Flagged before, and cleared on 2 Aug 2026. This is a later finding.
Indicators gptMalware:QxWD0aeEvwV-bl8U1RTUNuo_49aYmuXL0vDL9UDMHcbE (LLM suspicion, first seen 13 Aug 2026)
io.github.Baneado98/npm-guardian
Indicators gptMalware:QCw_FS6xRfMWNag7FBSxdnAJB2kAqzgZ1dNfXVaNVBoM (LLM suspicion)
Maya MCP
Indicators gptMalware:QUOZ9dSSSqOyr0Uwhfq1mhhN79XjcHRuOSW2Sa4B1J_k (LLM suspicion, first seen 3 Aug 2026)
io.github.philpof102-svg/biii
Indicators gptMalware:Q-d5qpyHrn7ZWFJZ3OBj4KZDMAjdA-cG2kifILCMmQMw (LLM suspicion, first seen 2 Aug 2026)
io.github.xcodethink/pixelcheck
Indicators gptMalware:Q51HhfW-hUWB2p8DD5XB7hRxEGZxmA00r3dJU5D9xMBw (LLM suspicion, first seen 4 Aug 2026)
io.github.jyswee/taufunctions
Indicators gptMalware:QDmuqeyx7aoknUPC5B5Ij0JvvRxsNq4c_auAEHtZekuk (LLM suspicion, first seen 2 Aug 2026)
io.github.Dudude-bit/yandex-lavka-mcp
Indicators gptMalware:QhsSVea1hARrQdSTONZ9MQgnjux2AaYSDFfyrxXQMpTk (LLM suspicion, first seen 2 Aug 2026)
VisualTorch
Indicators gptMalware:QAP0wBC_cKVF4sCTkXzQkzD_H25O-lY_daTVR397EL5c (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QWsP0cqhkLOy6vDiEa4fmjhry6lBzNT2iffj6GvfCSow (LLM suspicion)
0nMCP — Universal AI API Orchestrator
Indicators gptMalware:Qc-xEDlDU_QOBHvE7vpDUNNERn8Z_BxG1fJaaYifQF8E (LLM suspicion)
io.github.datasynx/cartography
Indicators gptMalware:QG-tdxy_Td-QP7d89N7r6d-W6H2gr1pFA_HBgD0Wz84Y (LLM suspicion)
dev.fentz.envcp/envcp
Indicators gptMalware:QNq7x36LS-e5-KdA38O3ejv8hZvMRwuKmktLl2v7aaUk (LLM suspicion)
io.github.vmoranv/jshookmcp
Indicators gptMalware:QHDx8MaHMbv4gWDNObsQXZczyGGCkR2Xqd285SwR01aU (LLM suspicion) · gptMalware:QI40MCCzga-0ah02HbHY46GUJhgvStnzpozkZTy-N_vk (LLM suspicion) · gptMalware:Qd29of9U5h_jN6_-EKb0cW-smo9nZncLmjSTAbe86bqY (LLM suspicion) · gptMalware:QjfXRQ7NZOKuxzdAc9F4wth4KQn56PHD9g1ugjQ6ptLk (LLM suspicion) · gptMalware:QnD44gFsTYXw3ppFuXppzHvQlAlARicXP1W3Hq4MrJcA (LLM suspicion) · gptMalware:Qo2mumTzDvIrKGvMQ0PPGfCNC5AdKbvAKRT0Fo69EKWk (LLM suspicion)
Judges Panel
Indicators gptMalware:QHiZ9--D0CEJAQdXvA9M9LV8nsfBEV-_PDGdqaDKf2EE (LLM suspicion)
io.github.polygraphso/litmus
Indicators gptMalware:QlHuedCb6gQ4yGkGPxEnt7wGIjwsGaU9jnZziH-pDihY (LLM suspicion)
io.github.Trusty-Squire/mcp
Indicators gptMalware:QcYx91ARuAb0pPPXC9MDUlxZItkWiEBdt5YC_-O5I_Tg (LLM suspicion)
io.github.ascript-cn/ascript-mcp
Indicators gptMalware:Qv54BcYaK04ilDnd9ay1gReu2etbiwj1ZgPM7yQkw1Z8 (LLM suspicion) · gptMalware:Qv6lIcVXKYqfkj7MFXAG74nzE7vxdcMNBMeGYYLJsNnQ (LLM suspicion, first seen 2 Aug 2026)
Codex ServerOps MCP
Indicators gptMalware:Qm7CDbbjjlWipiosh1NYee6pbMMEw-TVvHir4C4Xjygk (LLM suspicion)
Copilot Money
Indicators gptMalware:QDdJwghUApMVXSQlBXPOPDPlt8mnpKnJuqcaGbUeqfMA (LLM suspicion) · gptMalware:Qnf7zr-42MEeHIdSagz9DbhdMCdqD9aVfUjv-bvYchxY (LLM suspicion)
io.github.kimbo128/drain-mcp
Indicators gptMalware:Qo0Q-UWSsV_Vc9p_NS_Sm-Dc4AxYsmViYy9BZJ326uzo (LLM suspicion)
macOS-MCP
Indicators gptMalware:QGd3FrpUGWjqA7PwGUDZDFbNpMP-_BQCWbO_7pY-khnk (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QerDwPe5fW5-_ecTBF8NO3sZtbK7AKIsbJ2A9VG_OYvQ (LLM suspicion)
io.github.soufianetahiri/mception
Indicators gptMalware:Q1AMquoZ-KDogeWuKLEoSe78r2zDkbfkYXh03CUDQ0no (LLM suspicion) · gptMalware:QzNILOpNI02rBP9oUurrSgaQoAdF8u-P1Zjt_0SALSHA (LLM suspicion)
io.github.daedalus/mcp-smbmap
Indicators gptMalware:Q5AtmWN45F6mm3o5vWH72s_gPGdX47xPHVql-Tfkzo0M (LLM suspicion) · gptMalware:QIOq3Zj25zbUfvO_jn99tuBjnLebkzm-MykuatrXK7KY (LLM suspicion, first seen 2 Aug 2026)
io.github.temurkhan13/openclaw-skill-vetter-mcp
Indicators gptMalware:QrUSQuLU3d4s9JZFcZi8Zwd13oX2lU6qLIf1SWeLhUXU (LLM suspicion) · gptMalware:QtOTWIU4SdQ14HMg8M7a4WzuspkKlZmzw3lnaL51NxlE (LLM suspicion, first seen 2 Aug 2026)
io.github.100xPercent/pop-pay
Indicators gptMalware:QLdEhOxsTNniazX9SuaLNljcE03a-HFtO8FNhEc7-0Bg (LLM suspicion)
io.github.ExpertVagabond/universal-blockchain
Indicators gptMalware:Q68c6C3M-tRSR4DWOnWuAv-spOz3mq4nBklwOCY0pa_Y (LLM suspicion)
io.github.asume21/webear
Indicators gptMalware:QQH-VokUc-IAQ8mLv_JNF-K_OKCEmXDV7-2jWLT3XMVY (LLM suspicion)
unerr
Indicators gptMalware:Qq_pD-BpbC4yJBDHXE9Fzfx0GsgWLzuuycP6vAMRAZg0 (LLM suspicion)
io.github.faze79/wpf-visual-tree
Indicators gptMalware:Q6jidzd63Cd4SFRgg6XW1bQ_2sGHG5GyGDxgoyySl7LQ (LLM suspicion)
io.github.jyswee/a2a-trustgate
Indicators gptMalware:Q4Jjga4RROq_jVMqNoSVKncv9aDOGtaJYpcI37pWrGhU (LLM suspicion, first seen 30 Aug 2026) · gptMalware:QFy2O_SD9L1rucPYgIz-yPLbpa00gDxvwnDQa8oPEsP8 (LLM suspicion, first seen 30 Aug 2026) · gptMalware:QL8Gpdfmg2Gc_M1ClqE7fnUHyxOwuxoDtXopPST1M7Bs (LLM suspicion, first seen 30 Aug 2026) · gptMalware:QW4BxD4VVOs0pM5Gh75fr2VkC6Rl23rU7ZcQMYKtCODc (LLM suspicion, first seen 30 Aug 2026)
io.github.jyswee/agenticmemory
Indicators gptMalware:Qss6hWUIe1q7BpGxiSOHclf4SCY86f1Alzfd-kHVQFy8 (LLM suspicion, first seen 7 Sept 2026)
io.github.jyswee/ainpc-cli
Indicators gptMalware:QgbeyyxipQRpP9ynNFACHkgZBdif-bpH_P3bN3T4svZs (LLM suspicion)
io.github.chernistry/bernstein
Indicators gptMalware:QJwifQ33IPOykvHskujmTRLuzuUGeKOWpBt8FPDgj95U (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QOD6NXGS2Gzuo4J9jGQ_mZvN5Mbiyx6EBXNTcnOZoQ2A (LLM suspicion)
These were flagged, and then the scanner stopped being able to answer for them: an ecosystem it does not index, an outage, or a key we no longer hold. Losing sight of a finding is not the same as the finding being fixed, so they stay on the register rather than quietly disappearing.
PySide6 MCP
Indicators gptMalware:Q7EjUqQUiyf9ConafLw5CVFn3QRewmX6-FrbKxinHNn0 (LLM suspicion, first seen 6 Sept 2026) · gptMalware:QaNTReEzeCcBEPgPDJpMcoQ49hxdANvfth3ToNeXkj8g (LLM suspicion, first seen 6 Sept 2026)
io.github.jyswee/buggazi
Flagged before, and cleared on 29 Aug 2026. This is a later finding.
Indicators gptMalware:QOxteq6S5Fl2MW8h6nNJO_hwQQK9VYcgIfOTvzreGNeM (LLM suspicion, first seen 5 Sept 2026)
io.github.emog33k/winrdp-mcp
Indicators gptMalware:Qc_iGX6pHpBHVGB9qqssZ82xIZJ6MNz5tBLPIXP29rM8 (LLM suspicion)
io.github.manumarri-sudo/quill
Indicators gptMalware:QvGhsqRXPjD359eDQXJeHN_6Jg-G01qTNwDiLZmcW59g (LLM suspicion, first seen 2 Aug 2026)
me.openbrowser/openbrowser-ai
Indicators gptMalware:Q6mCuonq25zyiIKj3Z1UluTDHuUddCcqBB5OviiEfnWE (LLM suspicion, first seen 2 Aug 2026)
io.github.silex-tec/silex
Indicators gptMalware:QPx463FMR-Q2zZnlKUiwPp9SpSV7fz59QZGNTFtAVYT0 (LLM suspicion)
substack-ops
Indicators gptMalware:Qaqic9BCjIFb2L9C4P1d1K2l0MNAorRbIPP9VU1Bfy_g (LLM suspicion) · gptMalware:QtXQIIyWcfxeIGJnbzxG-IRABaz2h7eQwEO7mzhVwtZg (LLM suspicion, first seen 2 Aug 2026)
These were flagged, and a later scan came back clean. Kept on the record because a package that shipped a malware verdict once is worth knowing about, not because it is still a problem.
MCP VS Code
Indicators gptMalware:QeDPI2RnibNI2xGavcSsQXUJN4nTPlln9ty4lHOK2vWQ (LLM suspicion, first seen 10 Aug 2026)
io.github.jyswee/secretcarousel
Flagged before, and cleared on 29 Aug 2026. This is a later finding.
Indicators gptMalware:QrhVVSgFG_Oa3M_rFSXAYfxubSQEbVAvhxfsd9En4Iho (LLM suspicion, first seen 31 Aug 2026) · gptMalware:QxDyPCx35QwS15zKRtPSvg1r98iBbvPz_k-dB2cdxDdI (LLM suspicion, first seen 31 Aug 2026)
io.github.frsorrentino/chrome-bridge
Indicators gptMalware:QwocqzvG6ZjlG5ApZuMoP-XO8DeakRB_ZBJ-P6SWamhs (LLM suspicion, first seen 2 Aug 2026)
ARC-1
Indicators gptMalware:Qe9_0VU5JFpSBpfSKhM00Xly9TbEXeEeoa-ZtphMlvTU (LLM suspicion, first seen 19 Aug 2026)
ARC-1
Indicators gptMalware:QaxGS1T39CTQQipmcWap5Ih3ufPizNaLFYJA5wVE8fAA (LLM suspicion, first seen 19 Aug 2026)
io.github.alisaitteke/photoshop-mcp
Indicators gptMalware:QX7bZwK9bivBVTH1F9tjlVWy96NzVHOsl6hyPvx6dA10 (LLM suspicion, first seen 10 Aug 2026)
io.github.drjerryrelth/ghl-command
Indicators gptMalware:QpH-NPQClliCoZaEEVIchuceVg9lyDPRkDS5kDu9Eyww (LLM suspicion, first seen 13 Aug 2026)
OpenHCS
Flagged before, and cleared on 12 Aug 2026. This is a later finding.
Indicators gptMalware:QsTqVZjL3scI0hqOBQmOqh0u970Su5SvE4gQ1UkK6Xr0 (LLM suspicion, first seen 15 Aug 2026)
Spacefast
Flagged before, and cleared on 21 Aug 2026. This is a later finding.
Indicators gptMalware:Qn8z_R8IZXyqwqQsVwMLhKafHLv3lBnv11DDqKXIe5Ig (LLM suspicion, first seen 22 Aug 2026)
io.github.oaslananka/easyeda-mcp-pro
Indicators gptMalware:QhPav0Fz1QJSUNCep8YLcGqdT0RkN-4D22xE04dQT7Vg (LLM suspicion, first seen 1 Aug 2026)
Terradev
Indicators gptMalware:QI071Mv7-VsPt4VM4lw_9sdWn5noWLpPKcUL6CW1Yhf8 (LLM suspicion) · gptMalware:QYieuJE3gG8v56VHJ7-UTxI4i7Yt871kbmbpoSqSiHUs (LLM suspicion)
Brave DevTools MCP
Indicators gptMalware:QOxow7EXFn8LF2GdpP2J6f4dgEAhs7FHtbh4_w7Ls9Ys (LLM suspicion, first seen 12 Aug 2026)
io.github.AiDimag/aidimag
Indicators gptMalware:QXYEF1NvjTi_oNnku6pEw_XpAbTiwiSgDsGMfccIMDMQ (LLM suspicion)
io.github.anup-khanal/aidimag
Indicators gptMalware:QwNrg3myiv4zSXjnB3c7DbcIxHIU7ij2MuulzKFEHWKs (LLM suspicion)
Entroly
Indicators gptMalware:Qcy23Xu6DpisF1PMXIfrBTtjYZrLmqUHVw99Dxsbe4wk (LLM suspicion, first seen 12 Aug 2026)
SassyMCP
Indicators gptMalware:Q4DHP0T0NZmqGnDHvFzRvNoettL67v-rYgE-U1I-2Bp0 (LLM suspicion, first seen 14 Aug 2026)
Slack MCP Server
Indicators gptMalware:QO7U7TSAAY1dZ0hBC63tYT2CIYBLMtpe_gSmQu6Myxx0 (LLM suspicion, first seen 13 Aug 2026) · gptMalware:Qyutcl00jhlQglthTVGcJpjzP3HZGqBQno6AbQ6bqfBY (LLM suspicion, first seen 13 Aug 2026)
Trusty Squire
Indicators gptMalware:Q0uWYxjy-xfTc5qTfM7ifuhyXOWIdD9ZSqnMcIq3aMPg (LLM suspicion, first seen 12 Aug 2026) · gptMalware:Qdw9UMLzX8UjJ7FcusbUHdL7hRn_BVL-SHByRJg3o_rc (LLM suspicion, first seen 12 Aug 2026)
io.github.jyswee/analyga
Indicators gptMalware:QmI4YfuMHpTExdAlQ7Dt2DFZ-3UXdhc_pG6z96IIGdCw (LLM suspicion)
io.github.verbative/verbative-memory
Indicators gptMalware:Q7R4SGjpUxZOzvgeJDvQsObfOyNzOuat9ZsF3Jf0Q0_E (LLM suspicion)
Funplay Cocos MCP
Indicators gptMalware:Q8Tachfs-wnxKJVmMcM5Gc_aO-Beofg92kaBBWKF3RU4 (LLM suspicion, first seen 2 Aug 2026)
io.github.YawLabs/lemonsqueezy-mcp
Indicators gptMalware:QNbMjQGotif1_Fj9bDtzyoDVlFCMZrC4zp0IdMbyuzYQ (LLM suspicion, first seen 7 Aug 2026)
Zscaler Zero Trust Exchange
Indicators gptMalware:Q6VdEuuQ1R1XK9_lYI2mWB1Jju_TLUyy8Jt40N5g0nI8 (LLM suspicion, first seen 28 Jul 2026)
searchts
Indicators gptMalware:Q4bw8bNbyeyX-B_qcb1rT2i0JgkEaxD5MENuBIp-ryOk (LLM suspicion)
io.github.rm-rf-prod/groundtruth
Indicators gptMalware:QEsZ61CuWwCQ0i1QCy9KjMYOcqv6PSM2quiV3YWsg98A (LLM suspicion)
Uindow
Indicators gptMalware:Q1HahC6SZziSGBQsTOjFwj_iggH0JIsFttC_PqaCXFHI (LLM suspicion)
io.github.sipyourdrink-ltd/bernstein
Indicators gptMalware:Qw4gv3V00Whsinnljg_ZNdy4TFRTz2gH0Aghv7ucL8dw (LLM suspicion, first seen 28 Jul 2026)
tech.geckovision/surf
Indicators gptMalware:QEgniPy6_43MX0lthKdp4gmnRehg_r9ouwmJPsX5n7CY (LLM suspicion, first seen 29 Jul 2026)
VerifyMCP does not analyse package code for malicious behaviour. We query Socket, record what it returns, and link its own report for every package so you can check the verdict at its source. A false positive is the vendor's to withdraw and ours to stop reporting on the next scan.
The scanner's API returns no detection timestamp, so we cannot tell you when malicious code was published or when it was first discovered. What we can tell you is the UTC day one of our own scans first recorded the verdict, which is what "first flagged" means throughout. Where our records open with the finding already present, the date reads "on or before", because the real start is older than anything we hold.
Indicators tagged as an LLM suspicion come from a language model reading the package, not from a malware signature. They inform the score but can never floor a package to a failed verdict on their own.
The scanner indexes npm, PyPI and NuGet. Container images and MCPB bundles are not covered at all, and a package it has not analysed yet returns no verdict rather than a clean one. Those components score zero on this check rather than being quietly skipped, but they will never appear on this page.
Full method: the malware check and how we score.