<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.CSOAI-ORG/supply-chain-mcp · supply-chain-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] supply-chain-mcp: Source repository (pass → fail)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a0a8de-c5f5-7cca-ada8-0527f988fe81</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a0a8de-c5f5-7cca-ada8-0527f988fe81</guid><description>Source repository (pass → fail). Compared against 2026-09-15.</description><pubDate>Wed, 16 Sep 2026 06:19:26 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] supply-chain-mcp: Malware scan (pass → unverified)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a0514a-4cf2-7b0e-a9bd-58952bbff99c</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a0514a-4cf2-7b0e-a9bd-58952bbff99c</guid><description>Malware scan (pass → unverified). Compared against 2026-08-29.</description><pubDate>Sun, 30 Aug 2026 06:10:18 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] supply-chain-mcp: Malware scan (unverified → pass)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a04c24-791c-7c67-a75e-80114ab4785b</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a04c24-791c-7c67-a75e-80114ab4785b</guid><description>Malware scan (unverified → pass). Compared against 2026-08-28.</description><pubDate>Sat, 29 Aug 2026 06:10:53 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] supply-chain-mcp: Malware scan (pass → unverified)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a03264-2ce2-7ebc-995f-003d96fff111</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a03264-2ce2-7ebc-995f-003d96fff111</guid><description>Malware scan (pass → unverified). Compared against 2026-08-23.</description><pubDate>Mon, 24 Aug 2026 06:10:20 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] supply-chain-mcp: Malware scan (unverified → pass)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a02770-ab9a-7c6d-8cbb-b25133ee1e6b</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a02770-ab9a-7c6d-8cbb-b25133ee1e6b</guid><description>Malware scan (unverified → pass). Compared against 2026-08-21.</description><pubDate>Sat, 22 Aug 2026 03:08:10 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] supply-chain-mcp: Malware scan (pass → unverified)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a022ef-4def-78b1-88ac-b1c9a028636e</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_01a022ef-4def-78b1-88ac-b1c9a028636e</guid><description>Malware scan (pass → unverified). Compared against 2026-08-20.</description><pubDate>Fri, 21 Aug 2026 06:08:23 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] supply-chain-mcp: Malware scan (unverified → pass)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fdf56-7240-7586-ac60-d45161d93d30</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fdf56-7240-7586-ac60-d45161d93d30</guid><description>Malware scan (unverified → pass). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 03:06:52 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] supply-chain-mcp: Malware scan (pass → unverified)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fc5c4-76c4-7039-8e44-5db1b60ca38a</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fc5c4-76c4-7039-8e44-5db1b60ca38a</guid><description>Malware scan (pass → unverified). Compared against 2026-08-02.</description><pubDate>Mon, 03 Aug 2026 03:56:54 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] supply-chain-mcp: Malware scan (unverified → pass)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fc071-3ee0-713f-b0d3-abcd00286043</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fc071-3ee0-713f-b0d3-abcd00286043</guid><description>Malware scan (unverified → pass). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 03:07:54 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] supply-chain-mcp: Malware scan (pass → unverified)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fb4cf-a2b8-788d-af47-352929fb8a72</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fb4cf-a2b8-788d-af47-352929fb8a72</guid><description>Malware scan (pass → unverified). Compared against 2026-07-29.</description><pubDate>Thu, 30 Jul 2026 20:55:34 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] supply-chain-mcp: Provenance (unverified → fail)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aac-74aa-bf10-5d74d7bd743e</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aac-74aa-bf10-5d74d7bd743e</guid><description>Provenance (unverified → fail). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 13:32:19 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] supply-chain-mcp: Known CVEs (unverified → pass)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aac-7d33-acf8-6f0520741452</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aac-7d33-acf8-6f0520741452</guid><description>Known CVEs (unverified → pass). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 13:32:19 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] supply-chain-mcp: Install scripts (unverified → pass)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aad-7418-93c0-3535bd250244</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aad-7418-93c0-3535bd250244</guid><description>Install scripts (unverified → pass). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 13:32:19 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] supply-chain-mcp: The scripts that run when this package is installed changed (build_backend)</title><link>https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aad-7871-99e3-7d5dda684704</link><guid isPermaLink="true">https://verifymcp.io/servers/csoai-org-supply-chain-mcp/supply-chain-mcp#chg-chg_019fae13-7aad-7871-99e3-7d5dda684704</guid><description>The scripts that run when this package is installed changed (build_backend). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 13:32:19 GMT</pubDate><category>security</category><category>neutral</category><category>installscript.hooks_changed</category></item></channel></rss>