{"slug":"dependency-vulnerability-tracker-package-security-advis-80b66a0f","name":"Dependency Vulnerability Tracker — package security advisories ($0.01/query)","summary":"Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds.","status":"live","headings":[{"slug":"security","title":"Security & risk checks"}],"indexable":true,"listed_since":"2026-10-25T17:50:28.248164Z","sources":[{"source":"mcp_registry","external_id":"com.a2awire/data-dependency-vulnerability-malicious-package-security","owner_address":null,"seen_at":"2026-11-08T16:26:09.256271Z","removed_at":null}],"endpoints":[{"url":"https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http","host":"a2awire.com","protocol":"mcp","state":"live","last_probe_at":"2026-11-11T03:12:22.062387Z","last_ok_at":"2026-11-11T03:12:22.062387Z","tools_count":21,"tools_changed_at":"2026-11-11T03:12:22.062387Z","uptime_24h":1.0,"uptime_30d":1.0},{"url":"https://a2awire.com/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673","host":"a2awire.com","protocol":"web","state":"unreachable","last_probe_at":"2026-11-10T12:54:42.647839Z","last_ok_at":null,"tools_count":null,"tools_changed_at":null,"uptime_24h":0.0,"uptime_30d":0.0}],"also_listed_as":[],"payment_options":[],"usage":null,"assessment":{"method":"2026.11.3","checks":[{"id":"answers","state":"pass","reason":"Answered a check within the last hour."},{"id":"owner","state":"pass","reason":"Control proven: a2awire.com, proven to the MCP Registry."},{"id":"track_record","state":"fail","reason":"Listed for 16 days; 30 are needed."},{"id":"real_customers","state":"not_applicable","reason":"It does not sell over x402."},{"id":"clean_scan","state":"pass","reason":"None of the patterns addrbook looks for (hidden instructions, invisible characters) appeared in the 21 tools this server showed it."}],"passed":3,"applicable":4,"contradicted":false,"computed_at":"2026-11-11T03:13:00.440775Z"},"identity":{"endpoint_domains":["a2awire.com"],"proven_domains":[{"domain":"a2awire.com","proven_by":"mcp_registry","serves_endpoint":true,"as_of":"2026-11-08T16:26:09.256271Z"}],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":{"endpoint_url":"https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http","tools":21,"high":0,"medium":3,"findings":[{"code":"unusual_wording","severity":"medium","tool":"birth","detail":"its description says “private key”"},{"code":"unusual_wording","severity":"medium","tool":"join_a2awire","detail":"its description says “private key”"},{"code":"unusual_wording","severity":"medium","tool":"register","detail":"its input schema says “private key”"},{"code":"runs_commands","severity":"capability","tool":"hire_and_execute","detail":""}],"observed_at":"2026-11-11T03:12:22.070012Z","evidence_id":4883533},"notice":"Not affiliated with addrbook — claim or request removal."}