Detonation LabsBehavioral security for the AI agent supply chain

DBPublic database

Every public detonation, with its evidence.

Each package we detonate publicly is listed here with its full report. Search before you install.

16
reports
1
malicious
2
suspicious
7
no malicious behavior

7 results · newest first

PackageVerdictTop findingConfidenceScanned
@pipeworx/mcp-gnomadnpm 0.1.3 No malicious behavior Nothing malicious or suspicious observed — 26 Oct 2026 @upstash/context7-mcpnpm 4.4.4 No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026 chrome-devtools-mcpnpm 1.12.0 No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026 mcp-exploit-demogithub No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026 pdfgithub No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026 @modelcontextprotocol/server-everythingnpm 1.0.0 No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026 @modelcontextprotocol/server-memorynpm 1.0.0 No malicious behavior Nothing malicious or suspicious observed — 25 Oct 2026

"No malicious behavior observed" reports observed behavior only. It does not prove a package is safe.