Supply chain
Every package in the VerifyMCP catalogue that a supply-chain scanner has flagged for malware, currently or in the past. A critical verdict caps that component's trust score at 0, so these are the servers to look at before you install anything.
Covering the last 90 days, which is how long we keep the per-check records this page is built from. Last scan represented here: 5 Aug 2026.
Every indicator behind these came from a language model reading the package, not from a malware signature. That is a reason to look closely before installing, not a detection. Our scoring caps a suspicion below a confirmed finding for the same reason, and it can never floor a package to a failed verdict on its own.
io.github.Mrshahidali420/gsc-indexer-mcp
Indicators gptMalware:Q-2zKGGpCPI4OnbiOCFAmRZxJbqugx58z0P-7641gaYQ (LLM suspicion) · gptMalware:QC4Uwhd7vPiF3T-Sp7RXZ6Ugsu7utq6G012XOlwmMAyg (LLM suspicion)
argot
Flagged before, and cleared on 2 Aug 2026. This is a later finding.
Indicators gptMalware:QMDKclbi0oGcq-Vm8jGIPCTrDtAjLdxBxxmKEbq4_RtY (LLM suspicion, first seen 4 Aug 2026)
io.github.Baneado98/npm-guardian
Indicators gptMalware:QCw_FS6xRfMWNag7FBSxdnAJB2kAqzgZ1dNfXVaNVBoM (LLM suspicion)
io.github.verbative/verbative-memory
Indicators gptMalware:Q7R4SGjpUxZOzvgeJDvQsObfOyNzOuat9ZsF3Jf0Q0_E (LLM suspicion)
Maya MCP
Indicators gptMalware:QUOZ9dSSSqOyr0Uwhfq1mhhN79XjcHRuOSW2Sa4B1J_k (LLM suspicion, first seen 3 Aug 2026)
Trusty Squire
Indicators gptMalware:Q5rsOmgQlUC2wrmyRunRDeoBvU6v3LQWLdQ-h1XGd5mQ (LLM suspicion, first seen 5 Aug 2026) · gptMalware:QU0Zuwgk16ZfbUmzVXAosjFBCFoCf1yTIa_25x79ulto (LLM suspicion, first seen 5 Aug 2026)
ARC-1
Indicators gptMalware:QpWAgPkJ_WybiHsIIPQy56l9rz3JYOTaIpGSD7Jw6BrU (LLM suspicion, first seen 3 Aug 2026)
ARC-1
Indicators gptMalware:QKsAk3dG1KcuhLuktrudo8AD5ooBByVH9BldDfHa2nVo (LLM suspicion, first seen 2 Aug 2026)
io.github.philpof102-svg/biii
Indicators gptMalware:Q-d5qpyHrn7ZWFJZ3OBj4KZDMAjdA-cG2kifILCMmQMw (LLM suspicion, first seen 2 Aug 2026)
io.github.jyswee/buggazi
Indicators gptMalware:QUfKuy8yjOj9Nj1Ee9iBmin2YmrYBhy-vj4YJkEjLEPo (LLM suspicion, first seen 5 Aug 2026) · gptMalware:Qeas1JgSLe2PGdwr2Pdd4rI_k5m9cNdyxR_xbVvDcUvA (LLM suspicion, first seen 5 Aug 2026)
io.github.frsorrentino/chrome-bridge
Indicators gptMalware:QwocqzvG6ZjlG5ApZuMoP-XO8DeakRB_ZBJ-P6SWamhs (LLM suspicion, first seen 2 Aug 2026)
Entroly
Indicators gptMalware:QqWTy4GJW4hW0OI29_YQCPav8A6uL4Z7BFoP-JbEA2mA (LLM suspicion, first seen 5 Aug 2026)
io.github.xcodethink/pixelcheck
Indicators gptMalware:Q51HhfW-hUWB2p8DD5XB7hRxEGZxmA00r3dJU5D9xMBw (LLM suspicion, first seen 4 Aug 2026)
io.github.jyswee/secretcarousel
Indicators gptMalware:QE1k_YX9D2xlCmnzGRxhV203VUlqVg0lcMPZHx3ornNM (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QQ_GywtJLHyah3yD-ptZw4OjNXJvJGJd1wwSdUPWQiv0 (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QdYslHDUC3TI614TydcGiJNE9e_fOgX2QxJ_HTzFAIzU (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QijQgCV0rbwsYzaE69a-S7Ix3534OHEORrUDK3K7dDYo (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QrF8qD6pHaMqiWF8duBbKb38EUOF6qwlxwR8tea1HmBE (LLM suspicion, first seen 2 Aug 2026)
io.github.jyswee/taufunctions
Indicators gptMalware:QDmuqeyx7aoknUPC5B5Ij0JvvRxsNq4c_auAEHtZekuk (LLM suspicion, first seen 2 Aug 2026)
io.github.drjerryrelth/ghl-command
Indicators gptMalware:Qani3IMnrF3dumsLt9wUbf_xvThltfcdFCI9OL09-q00 (LLM suspicion, first seen 4 Aug 2026)
io.github.oaslananka/easyeda-mcp-pro
Indicators gptMalware:QhPav0Fz1QJSUNCep8YLcGqdT0RkN-4D22xE04dQT7Vg (LLM suspicion, first seen 1 Aug 2026)
0nMCP — Universal AI API Orchestrator
Indicators gptMalware:Qc-xEDlDU_QOBHvE7vpDUNNERn8Z_BxG1fJaaYifQF8E (LLM suspicion)
io.github.datasynx/cartography
Indicators gptMalware:QG-tdxy_Td-QP7d89N7r6d-W6H2gr1pFA_HBgD0Wz84Y (LLM suspicion)
dev.fentz.envcp/envcp
Indicators gptMalware:QNq7x36LS-e5-KdA38O3ejv8hZvMRwuKmktLl2v7aaUk (LLM suspicion)
io.github.vmoranv/jshookmcp
Indicators gptMalware:QHDx8MaHMbv4gWDNObsQXZczyGGCkR2Xqd285SwR01aU (LLM suspicion) · gptMalware:QI40MCCzga-0ah02HbHY46GUJhgvStnzpozkZTy-N_vk (LLM suspicion) · gptMalware:Qd29of9U5h_jN6_-EKb0cW-smo9nZncLmjSTAbe86bqY (LLM suspicion) · gptMalware:QjfXRQ7NZOKuxzdAc9F4wth4KQn56PHD9g1ugjQ6ptLk (LLM suspicion) · gptMalware:QnD44gFsTYXw3ppFuXppzHvQlAlARicXP1W3Hq4MrJcA (LLM suspicion) · gptMalware:Qo2mumTzDvIrKGvMQ0PPGfCNC5AdKbvAKRT0Fo69EKWk (LLM suspicion)
Slack MCP Server
Indicators gptMalware:QNfxsunrS83xtZYXUD7zuJDgpHnbJWhQJ7HDL8SuBZJI (LLM suspicion, first seen 4 Aug 2026) · gptMalware:Qct7hhgKMmLIIxlATIp0MMb3K6Gz1SHKwD6xRiAKq6LU (LLM suspicion, first seen 4 Aug 2026)
Judges Panel
Indicators gptMalware:QHiZ9--D0CEJAQdXvA9M9LV8nsfBEV-_PDGdqaDKf2EE (LLM suspicion)
io.github.polygraphso/litmus
Indicators gptMalware:QlHuedCb6gQ4yGkGPxEnt7wGIjwsGaU9jnZziH-pDihY (LLM suspicion)
io.github.Trusty-Squire/mcp
Indicators gptMalware:QYNePg-f168cNtprVghSrpcuU18QmRX0rjxyCFN1YMdc (LLM suspicion) · gptMalware:QcYx91ARuAb0pPPXC9MDUlxZItkWiEBdt5YC_-O5I_Tg (LLM suspicion)
io.github.ascript-cn/ascript-mcp
Indicators gptMalware:Qv54BcYaK04ilDnd9ay1gReu2etbiwj1ZgPM7yQkw1Z8 (LLM suspicion) · gptMalware:Qv6lIcVXKYqfkj7MFXAG74nzE7vxdcMNBMeGYYLJsNnQ (LLM suspicion, first seen 2 Aug 2026)
Codex ServerOps MCP
Indicators gptMalware:Qm7CDbbjjlWipiosh1NYee6pbMMEw-TVvHir4C4Xjygk (LLM suspicion)
Copilot Money
Indicators gptMalware:QDdJwghUApMVXSQlBXPOPDPlt8mnpKnJuqcaGbUeqfMA (LLM suspicion) · gptMalware:Qnf7zr-42MEeHIdSagz9DbhdMCdqD9aVfUjv-bvYchxY (LLM suspicion)
io.github.kimbo128/drain-mcp
Indicators gptMalware:Qo0Q-UWSsV_Vc9p_NS_Sm-Dc4AxYsmViYy9BZJ326uzo (LLM suspicion)
macOS-MCP
Indicators gptMalware:QGd3FrpUGWjqA7PwGUDZDFbNpMP-_BQCWbO_7pY-khnk (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QerDwPe5fW5-_ecTBF8NO3sZtbK7AKIsbJ2A9VG_OYvQ (LLM suspicion)
io.github.soufianetahiri/mception
Indicators gptMalware:Q1AMquoZ-KDogeWuKLEoSe78r2zDkbfkYXh03CUDQ0no (LLM suspicion) · gptMalware:QzNILOpNI02rBP9oUurrSgaQoAdF8u-P1Zjt_0SALSHA (LLM suspicion)
io.github.100xPercent/pop-pay
Indicators gptMalware:QLdEhOxsTNniazX9SuaLNljcE03a-HFtO8FNhEc7-0Bg (LLM suspicion)
io.github.ExpertVagabond/universal-blockchain
Indicators gptMalware:Q68c6C3M-tRSR4DWOnWuAv-spOz3mq4nBklwOCY0pa_Y (LLM suspicion)
io.github.asume21/webear
Indicators gptMalware:QQH-VokUc-IAQ8mLv_JNF-K_OKCEmXDV7-2jWLT3XMVY (LLM suspicion)
unerr
Indicators gptMalware:Qq_pD-BpbC4yJBDHXE9Fzfx0GsgWLzuuycP6vAMRAZg0 (LLM suspicion)
io.github.faze79/wpf-visual-tree
Indicators gptMalware:Q6jidzd63Cd4SFRgg6XW1bQ_2sGHG5GyGDxgoyySl7LQ (LLM suspicion)
io.github.jyswee/a2a-trustgate
Indicators gptMalware:QK6athwkqJzx7kpUqO9jlMp3sjNR_vjdMk1WA8ydNBKA (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QNoO7ch8a3tRODb57_tVazd5vTIOPApbYc7pC1MJZAm8 (LLM suspicion, first seen 2 Aug 2026)
io.github.jyswee/agenticmemory
Indicators gptMalware:QgESvOPDHF_L2DproytMWfrVYYre12tuIKkPe6bglQFU (LLM suspicion) · gptMalware:QpemHmEw_G-J-q22oWn5Xy1F75GijPQDpPznTpqefbTk (LLM suspicion) · gptMalware:QrgejRIxLENrpbANYiUQyf7u7xHA9xmFxEwnbdonFKqg (LLM suspicion)
io.github.jyswee/ainpc-cli
Indicators gptMalware:QgbeyyxipQRpP9ynNFACHkgZBdif-bpH_P3bN3T4svZs (LLM suspicion)
io.github.chernistry/bernstein
Indicators gptMalware:QJwifQ33IPOykvHskujmTRLuzuUGeKOWpBt8FPDgj95U (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QOD6NXGS2Gzuo4J9jGQ_mZvN5Mbiyx6EBXNTcnOZoQ2A (LLM suspicion)
Funplay Cocos MCP
Indicators gptMalware:Q8Tachfs-wnxKJVmMcM5Gc_aO-Beofg92kaBBWKF3RU4 (LLM suspicion, first seen 2 Aug 2026)
These were flagged, and then the scanner stopped being able to answer for them: an ecosystem it does not index, an outage, or a key we no longer hold. Losing sight of a finding is not the same as the finding being fixed, so they stay on the register rather than quietly disappearing.
me.openbrowser/openbrowser-ai
Indicators gptMalware:Q6mCuonq25zyiIKj3Z1UluTDHuUddCcqBB5OviiEfnWE (LLM suspicion, first seen 2 Aug 2026)
io.github.Dudude-bit/yandex-lavka-mcp
Indicators gptMalware:QhsSVea1hARrQdSTONZ9MQgnjux2AaYSDFfyrxXQMpTk (LLM suspicion, first seen 2 Aug 2026)
VisualTorch
Indicators gptMalware:QAP0wBC_cKVF4sCTkXzQkzD_H25O-lY_daTVR397EL5c (LLM suspicion, first seen 2 Aug 2026) · gptMalware:QWsP0cqhkLOy6vDiEa4fmjhry6lBzNT2iffj6GvfCSow (LLM suspicion)
io.github.daedalus/mcp-smbmap
Indicators gptMalware:Q5AtmWN45F6mm3o5vWH72s_gPGdX47xPHVql-Tfkzo0M (LLM suspicion) · gptMalware:QIOq3Zj25zbUfvO_jn99tuBjnLebkzm-MykuatrXK7KY (LLM suspicion, first seen 2 Aug 2026)
io.github.temurkhan13/openclaw-skill-vetter-mcp
Indicators gptMalware:QrUSQuLU3d4s9JZFcZi8Zwd13oX2lU6qLIf1SWeLhUXU (LLM suspicion) · gptMalware:QtOTWIU4SdQ14HMg8M7a4WzuspkKlZmzw3lnaL51NxlE (LLM suspicion, first seen 2 Aug 2026)
SassyMCP
Indicators gptMalware:Q7jdPqD45tJ5qIi8gukSabMlvUVDjZ2PtCMVUEGQsS5E (LLM suspicion, first seen 28 Jul 2026) · gptMalware:Q834ohnNLTdLO-nKr5Ri_2LgTMV7KWV2Z1H5oDHM50Jk (LLM suspicion, first seen 2 Aug 2026)
io.github.silex-tec/silex
Indicators gptMalware:QPx463FMR-Q2zZnlKUiwPp9SpSV7fz59QZGNTFtAVYT0 (LLM suspicion)
substack-ops
Indicators gptMalware:Qaqic9BCjIFb2L9C4P1d1K2l0MNAorRbIPP9VU1Bfy_g (LLM suspicion) · gptMalware:QtXQIIyWcfxeIGJnbzxG-IRABaz2h7eQwEO7mzhVwtZg (LLM suspicion, first seen 2 Aug 2026)
Zscaler Zero Trust Exchange
Indicators gptMalware:Q6VdEuuQ1R1XK9_lYI2mWB1Jju_TLUyy8Jt40N5g0nI8 (LLM suspicion, first seen 28 Jul 2026)
These were flagged, and a later scan came back clean. Kept on the record because a package that shipped a malware verdict once is worth knowing about, not because it is still a problem.
OpenHCS
Indicators gptMalware:Q8qfXcc18bKDs3v8Aej3rPaNfobRtnoKApQpK7gK68CY (LLM suspicion, first seen 29 Jul 2026) · gptMalware:QHvoIzWhZQrFjjT6h9xlaqRbWDgvZh8ahrzVv0eaT0kw (LLM suspicion, first seen 29 Jul 2026)
searchts
Indicators gptMalware:Q4bw8bNbyeyX-B_qcb1rT2i0JgkEaxD5MENuBIp-ryOk (LLM suspicion)
io.github.rm-rf-prod/groundtruth
Indicators gptMalware:QEsZ61CuWwCQ0i1QCy9KjMYOcqv6PSM2quiV3YWsg98A (LLM suspicion)
Uindow
Indicators gptMalware:Q1HahC6SZziSGBQsTOjFwj_iggH0JIsFttC_PqaCXFHI (LLM suspicion)
io.github.sipyourdrink-ltd/bernstein
Indicators gptMalware:Qw4gv3V00Whsinnljg_ZNdy4TFRTz2gH0Aghv7ucL8dw (LLM suspicion, first seen 28 Jul 2026)
tech.geckovision/surf
Indicators gptMalware:QEgniPy6_43MX0lthKdp4gmnRehg_r9ouwmJPsX5n7CY (LLM suspicion, first seen 29 Jul 2026)
VerifyMCP does not analyse package code for malicious behaviour. We query Socket, record what it returns, and link its own report for every package so you can check the verdict at its source. A false positive is the vendor's to withdraw and ours to stop reporting on the next scan.
The scanner's API returns no detection timestamp, so we cannot tell you when malicious code was published or when it was first discovered. What we can tell you is the UTC day one of our own scans first recorded the verdict, which is what "first flagged" means throughout. Where our records open with the finding already present, the date reads "on or before", because the real start is older than anything we hold.
Indicators tagged as an LLM suspicion come from a language model reading the package, not from a malware signature. They inform the score but can never floor a package to a failed verdict on their own.
The scanner indexes npm, PyPI and NuGet. Container images and MCPB bundles are not covered at all, and a package it has not analysed yet returns no verdict rather than a clean one. Those components score zero on this check rather than being quietly skipped, but they will never appear on this page.
Full method: the malware check and how we score.