Detonation LabsBehavioral security for the AI agent supply chain

DBPublic database

Every public detonation, with its evidence.

Each package we detonate publicly is listed here with its full report. Search before you install.

16
reports
1
malicious
2
suspicious
7
no malicious behavior

16 results · newest first

PackageVerdictTop findingConfidenceScanned
span-mcppypi Could not run Nothing malicious or suspicious observed — 26 Oct 2026 @pipeworx/mcp-gnomadnpm 0.1.3 No malicious behavior Nothing malicious or suspicious observed — 26 Oct 2026 @faapi/mcpnpm 7.6.0 Could not run Nothing malicious or suspicious observed — 25 Oct 2026 prepublish-mcpnpm 1.0.3 Could not run Nothing malicious or suspicious observed — 25 Oct 2026 prepublish-mcpnpm 1.0.3 Could not run Nothing malicious or suspicious observed — 25 Oct 2026 @upstash/context7-mcpnpm 4.4.4 No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026 mcp-exploit-demogithub Suspicious Source code: hidden agent instructions in server.py Possible 25 Oct 2026 create-vagejsnpm 0.5.0 Could not run Nothing malicious or suspicious observed — 25 Oct 2026 lumi-trades-mcpnpm 0.9.7 Could not run Nothing malicious or suspicious observed — 25 Oct 2026 chrome-devtools-mcpnpm 1.12.0 No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026 mcp-injection-experimentsgithub Malicious Agent read credential files through another server's tool, unasked Confirmed 25 Oct 2026 mcp-injection-experimentsgithub Suspicious Source code: hidden agent instructions in the server's own code Possible 25 Oct 2026 mcp-exploit-demogithub No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026 pdfgithub No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026 @modelcontextprotocol/server-everythingnpm 1.0.0 No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026 @modelcontextprotocol/server-memorynpm 1.0.0 No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026

"No malicious behavior observed" reports observed behavior only. It does not prove a package is safe.