mcp-consultasdeveiculos-client 0.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -0
- package/package.json +7 -0
package/README.md
ADDED
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# mcp-consultasdeveiculos-client — security placeholder
|
|
2
|
+
This name was unclaimed on npm while being referenced as the planned distribution
|
|
3
|
+
channel (`npx -y mcp-consultasdeveiculos-client --token ...`) in DataCube's public
|
|
4
|
+
repository (mcp-apiconsultasdeveiculos/PLANO.md). Published as a benign, code-less
|
|
5
|
+
placeholder during an authorized security assessment to prevent dependency-confusion
|
|
6
|
+
attacks that would harvest API tokens and execute code on end-user machines.
|
|
7
|
+
This package contains NO code and NO install scripts. DataCube: claim ownership via npm support.
|
package/package.json
ADDED
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "mcp-consultasdeveiculos-client",
|
|
3
|
+
"version": "0.0.1",
|
|
4
|
+
"description": "SECURITY RESEARCH PLACEHOLDER (authorized pentest): this npm name was unclaimed while being referenced in DataCube's public documentation (github.com/DataCube/mcp-apiconsultasdeveiculos PLANO.md) as the distribution channel of an MCP client that receives users' API tokens. Claimed benignly to prevent dependency-confusion abuse. No code, no install scripts. Contact: security research - engagement datacube 2026-09-03.",
|
|
5
|
+
"license": "MIT",
|
|
6
|
+
"private": false
|
|
7
|
+
}
|