PkgRadar

npm · registry.npmjs.org

mcp-use

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 1.29.0-canary.16

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/src/browser.cjs
mediumRemote Payloadmatched "cUrl " · package/dist/index.cjs
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/index.cjs
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/src/agents/index.cjs
mediumRemote Payloadmatched "cUrl " · package/dist/src/react/index.cjs
mediumRemote Payloadmatched "cUrl " · package/dist/src/server/index.cjs
mediumRemote Payloadmatched "cUrl " · package/dist/chunk-2M2JEBVY.js
mediumRemote Payloadmatched "cUrl " · package/dist/index.js
mediumRemote Payloadmatched "cUrl " · package/dist/src/react/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.32.2-canary.4Low risk02026-06-16
1.32.2-canary.3Low risk02026-06-16
1.32.2-canary.2Low risk02026-06-16
1.32.2-canary.1Low risk02026-06-16
1.32.2-canary.0Low risk02026-06-16
1.32.1Low risk02026-06-16
1.32.1-canary.14Low risk02026-06-16
1.32.1-canary.13Low risk02026-06-16
1.32.1-canary.12Low risk02026-06-16
1.32.1-canary.11Low risk02026-06-16
1.32.1-canary.10Low risk02026-06-16
1.32.1-canary.9Low risk02026-06-16
1.32.1-canary.8Low risk02026-06-15
1.32.1-canary.7Low risk02026-06-15
1.32.1-canary.6Low risk02026-06-15
1.32.1-canary.5Low risk02026-06-15
1.32.1-canary.4Low risk02026-06-15
1.32.1-canary.2Low risk02026-06-15
1.32.1-canary.3Low risk02026-06-15
1.32.1-canary.1Low risk02026-06-11
1.32.1-canary.0Low risk02026-06-11
1.32.0Low risk02026-06-11
1.32.0-canary.0Low risk02026-06-11
1.31.1Low risk02026-06-11
1.31.1-canary.0Low risk02026-06-11
1.31.0Low risk02026-06-10
1.31.0-canary.1Low risk02026-06-10
1.30.3-canary.0Low risk02026-06-10
1.30.2Low risk02026-06-10
1.30.2-canary.0Low risk02026-06-10
1.30.1Low risk02026-06-10
1.30.1-canary.3Low risk02026-06-10
1.30.1-canary.2Low risk02026-06-10
1.30.1-canary.1Low risk02026-06-10
1.30.1-canary.0Low risk02026-06-10
1.30.0Low risk02026-06-08
1.30.0-canary.6Low risk02026-06-08
1.30.0-canary.5Low risk02026-06-08
1.30.0-canary.4Low risk02026-06-07
1.30.0-canary.3Low risk02026-06-05
1.30.0-canary.1Low risk02026-06-05
1.30.0-canary.2Low risk02026-06-05
1.29.1Low risk02026-06-04
1.29.1-canary.2Low risk02026-06-04
1.29.1-canary.1Low risk02026-06-04
1.29.0Low risk02026-06-03
1.29.1-canary.0Low risk02026-06-03
1.29.0-canary.23Low risk02026-06-03
1.29.0-canary.22Low risk02026-06-03
1.29.0-canary.21Low risk02026-05-27
1.29.0-canary.20Low risk02026-05-27
1.29.0-canary.19Low risk02026-05-27
1.29.0-canary.18Low risk02026-05-26
1.29.0-canary.16Review502026-05-24
1.29.0-canary.17Review502026-05-24

Block this in CI

PkgRadar gates mcp-use (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence