Open-source atomic malware analysis

Analyze another

@shellicar/mcp-exec

NPM
Verdict: BENIGN
SHA256: 485cd0680c5441cea9999ecf6fa030ebd9528808798738b39aefd4d4cd4bdf4d
“MCP server wrapping the Exec tool from @shellicar/claude-sdk-tools”
AI Legitimate MCP server tooling package
Mal-ecule
H(Cm)Md₂(Pa₂)
Size 4.6 KB download
First seen 31 days ago
Analyzed 29 days ago
Package pkg:npm/@shellicar/mcp-exec
Ecosystem javascript
Source registry.npmjs.org

Loading file contents…

Loading traits…

Identity

SHA-256 485cd0680c5441cea9999ecf6fa030ebd9528808798738b39aefd4d4cd4bdf4d
Canonical SHA-256 0021e664b22f8e995badab1918c32e8d7457f9a40fa9cc9a67fb9608ed2ad777
Filename @shellicar-mcp-exec-1.0.0-beta.7.tgz
Package @shellicar/mcp-exec
PURL pkg:npm/@shellicar/mcp-exec

Origin

Source forager
Feed npmjs.org
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@shellicar/mcp-exec/-/mcp-exec-1.0.0-beta.7.tgz

Timeline

First seen 25 Jul 2026 06:11 UTC
First analyzed 27 Jul 2026 07:50 UTC
Last analyzed 27 Jul 2026 07:50 UTC
Last updated 27 Jul 2026 07:50 UTC

Labeling

Label unknown
Label source forager
Traits version 9266e