May be try out vet as well: https://github.com/safedep/vet https://github.com/safedep/vet vet is backed by a code analysis engine that performs malicious packa

May be try out vet as well: https://github.com/safedep/vet https://github.com/safedep/vet vet is backed by a code analysis engine that performs malicious package (npm, pypi etc.) scanning. We recently extended it to support GitHub repository scanning as well. It found the malicious behaviour in mcp-servers-example/bad-mcp-server.js https://platform.safedep.io/community/malysis/01JRYPXM0SYTM89NZSFYBHG4RK https://platform.safedep.io/community/malysis/01JRYPXM0SYTM8...