Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"${projectName}": {
"args": [
"${projectName}"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
MCP-Framework is a framework for building Model Context Protocol (MCP) servers elegantly in TypeScript.
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Five weighted categories — click any category to see the underlying evidence.
Malicious code in create-docs-mcp (npm)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (fd4381fd77419441a2eefe6b22adef6c9f5adfe1b92be5d071abd5908fdf8647) Package is published at version 9999.99.99 — the canonical high-version override used in dependency-confusion attacks against private/internal package names — with a description self-identifying as a name referenced in a private repo. On `npm install`, postinstall.js POSTs JSON to https://ddactic-lab.online/sc/beacon containing package name/
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in developer-tools
Manage Supabase projects — databases, auth, storage, and edge functions
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite
MCP Security Weekly
Get CVE alerts and security updates for Mcp Framework and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.