github analyzed 08bc264

gitmaxd/dubco-mcp-server-npm

Drift inferred · capture-to-capture

HIGH 2026-06-10 code analysis flagged hidden prompt content in gitmaxd/dubco-mcp-server-npm

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

net Gitmaxd-dubco-mcp-server-npm-08bc264/build/index.js :5 import axios from 'axios';
net Gitmaxd-dubco-mcp-server-npm-08bc264/src/index.ts :10 import axios, { AxiosInstance, AxiosError } from 'axios';

secrets Gitmaxd-dubco-mcp-server-npm-08bc264/build/index.js :7 const API_KEY = process.env.DUBCO_API_KEY;
secrets Gitmaxd-dubco-mcp-server-npm-08bc264/src/index.ts :13 const API_KEY = process.env.DUBCO_API_KEY;

prepublishOnly Gitmaxd-dubco-mcp-server-npm-08bc264/package.json :11 npm run build