x402 endpoint anomalies — live measurements with on-chain references

🎭

@inkeep/open-knowledge mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.76.1 → 0.77.1. The package is installed about 11,163 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @inkeep/open-knowledge maintainer_changed

5h ago

🎭

@tempoxyz/mercator mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.0.680 → 0.0.703. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @tempoxyz/mercator maintainer_changed

5h ago

🎭

@antv/mcp-server-chart mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @antv/mcp-server-chart maintainer_changed

5h ago

🎭

@mintlify/mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 2,084 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @mintlify/mcp maintainer_changed

5h ago

🎭

@polderlabs/bizar mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 869 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @polderlabs/bizar maintainer_changed

5h ago

🎭

@qingflow-tech/qingflow-cli mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 1.1.47 → 1.1.48. The package is installed about 582 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @qingflow-tech/qingflow-cli maintainer_changed

5h ago

🎭

@eraserlabs/eraser-mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 50 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @eraserlabs/eraser-mcp maintainer_changed

5h ago

🎭

@zenrows/mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 2.2.0 → 2.2.4. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @zenrows/mcp maintainer_changed

5h ago

💨

com.agishub/mcp mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ com.agishub/mcp unpublished

1d ago

☠️

@yawlabs/mcp mcp install script added

Install script added: arbitrary code now runs on `npm i` — it was not there in 0.75.2. Versions: 0.75.2 → 1.0.10. The package is installed about 1,020 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @yawlabs/mcp install_script_added

1d ago

🎭

@aifinpay/agent mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 1.8.4 → 2.1.2. The package is installed about 882 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @aifinpay/agent maintainer_changed

1d ago

💨

io.github.lanchuske/local-mcp mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.lanchuske/local-mcp unpublished

2d ago

🎭

@posthog/mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 205,754 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @posthog/mcp maintainer_changed

3d ago

🎭

@modelcontextprotocol/codemod mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 2,342 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @modelcontextprotocol/codemod maintainer_changed

3d ago

🕳

io.github.Arthefacte/fractal-arena mcp repo removed

Repository link removed — the source can no longer be reviewed. Versions: 1.5.0 → 1.7.0. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.Arthefacte/fractal-arena repo_removed

4d ago

💨

dev.toolstop/check-digits mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ dev.toolstop/check-digits unpublished

4d ago

💨

dev.toolstop/export-control mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ dev.toolstop/export-control unpublished

4d ago

💨

dev.toolstop/prop65 mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ dev.toolstop/prop65 unpublished

4d ago

🎭

@modelcontextprotocol/sdk mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 50,000,448 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @modelcontextprotocol/sdk maintainer_changed

4d ago

🎭

@modelcontextprotocol/core mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 5,647,596 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @modelcontextprotocol/core maintainer_changed

4d ago

🎭

@modelcontextprotocol/client mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 3,423,399 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @modelcontextprotocol/client maintainer_changed

4d ago

🎭

@modelcontextprotocol/server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 4,894,783 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @modelcontextprotocol/server maintainer_changed

4d ago

🎭

@modelcontextprotocol/node mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 1,527,359 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @modelcontextprotocol/node maintainer_changed

4d ago

🎭

@modelcontextprotocol/express mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 341,058 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @modelcontextprotocol/express maintainer_changed

4d ago

🎭

@modelcontextprotocol/hono mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @modelcontextprotocol/hono maintainer_changed

4d ago

🎭

@stripe/mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 13,246 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @stripe/mcp maintainer_changed

4d ago

🎭

@modelcontextprotocol/fastify mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 17,683 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @modelcontextprotocol/fastify maintainer_changed

4d ago

🎭

@runpod/mcp-server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @runpod/mcp-server maintainer_changed

4d ago

☠️

secufusion-mcp mcp install script added

Install script added: arbitrary code now runs on `npm i` — it was not there in 1.2.8. Versions: 1.2.8 → 2.1.3. The package is installed about 5,893 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ secufusion-mcp install_script_added

4d ago

💨

io.github.chrisssun18-bot/oceanalt-aml mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.chrisssun18-bot/oceanalt-aml unpublished

5d ago

💨

io.github.cyphonica/powerbi-pbix-mcp mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.cyphonica/powerbi-pbix-mcp unpublished

5d ago

🎭

@cognitionai/metabase-mcp-server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 1,930 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @cognitionai/metabase-mcp-server maintainer_changed

5d ago

🎭

locadex mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 1.0.226 → 1.0.227. The package is installed about 798 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ locadex maintainer_changed

5d ago

🎭

@elementor/angie-sdk mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @elementor/angie-sdk maintainer_changed

6d ago

🎭

@runpod/mcp-server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 6,800 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @runpod/mcp-server maintainer_changed

6d ago

🎭

@everme/kimicode mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.6.1 → 0.7.0. The package is installed about 410 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @everme/kimicode maintainer_changed

6d ago

🎭

@xano/developer-mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 2.2.5 → 2.2.6. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @xano/developer-mcp maintainer_changed

6d ago

🕳

@canonmsg/claude-code-plugin mcp repo removed

Repository link removed — the source can no longer be reviewed. Versions: 0.34.4 → 0.34.5. The package is installed about 424 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @canonmsg/claude-code-plugin repo_removed

7d ago

🎭

@ibm/ibmi-mcp-server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.6.0 → 0.6.1. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @ibm/ibmi-mcp-server maintainer_changed

7d ago

🎭

@sparrowengg/twigs-ai-mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 464 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @sparrowengg/twigs-ai-mcp maintainer_changed

7d ago

💨

dev.gridcarbon/gridcarbon-mcp mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ dev.gridcarbon/gridcarbon-mcp unpublished

8d ago

💨

io.github.TheNexusIntel/nexus-mcp mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.TheNexusIntel/nexus-mcp unpublished

10d ago

☠️

@holmes-lab/holmes-kit mcp install script added

Install script added: arbitrary code now runs on `npm i` — it was not there in 0.19.3. Versions: 0.19.3 → 0.19.6. The package is installed about 2,169 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @holmes-lab/holmes-kit install_script_added

10d ago

🎭

@tencentcloud/sdk-mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 1.7.3 → 1.7.7. The package is installed about 951 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @tencentcloud/sdk-mcp maintainer_changed

10d ago

🎭

@slashfi/agents-sdk mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @slashfi/agents-sdk maintainer_changed

11d ago

🎭

@heroku/mcp-server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 4,586 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @heroku/mcp-server maintainer_changed

11d ago

🎭

@mondaydotcomorg/atp-mcp-adapter mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 1,032 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @mondaydotcomorg/atp-mcp-adapter maintainer_changed

11d ago

☠️

quotacap mcp install script added

Install script added: arbitrary code now runs on `npm i` — it was not there in 0.0.20. Versions: 0.0.20 → 0.0.22. The package is installed about 132 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ quotacap install_script_added

11d ago

🎭

@21st-dev/magic mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.2.2 → 0.2.3. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @21st-dev/magic maintainer_changed

12d ago

🎭

@cloudbase/cloudbase-mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 2.33.1 → 2.33.2. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @cloudbase/cloudbase-mcp maintainer_changed

12d ago

🎭

@21st-dev/cli mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 1.17.0 → 1.17.1. The package is installed about 5,986 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @21st-dev/cli maintainer_changed

12d ago

☠️

peertable mcp install script added

Install script added: arbitrary code now runs on `npm i` — it was not there in 0.8.55. Versions: 0.8.55 → 0.8.57. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ peertable install_script_added

12d ago

☠️

pantheon-cli mcp install script added

Install script added: arbitrary code now runs on `npm i` — it was not there in 0.2.117. Versions: 0.2.117 → 0.2.124. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ pantheon-cli install_script_added

13d ago

🎭

@babylonjs/mcp-servers mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 9.23.0 → 9.25.0. The package is installed about 363 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @babylonjs/mcp-servers maintainer_changed

13d ago

🎭

@qingflow-tech/qingflow-cli mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 324 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @qingflow-tech/qingflow-cli maintainer_changed

13d ago

🎭

helius-mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 2.1.0 → 2.2.0. The package is installed about 1,052 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ helius-mcp maintainer_changed

13d ago

🕳

io.github.johnInarti/agent-passport mcp repo removed

Repository link removed — the source can no longer be reviewed. Versions: 0.2.1 → 0.2.3. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.johnInarti/agent-passport repo_removed

15d ago

🕳

io.github.mitsuashi/habitat mcp repo removed

Repository link removed — the source can no longer be reviewed. Versions: 1.0.13 → 1.0.14. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.mitsuashi/habitat repo_removed

16d ago

🎭

log10x-mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 1,109 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ log10x-mcp maintainer_changed

16d ago

🕳

io.github.RolloutsAI/mails-agent-email mcp repo removed

Repository link removed — the source can no longer be reviewed. Versions: 0.2.8 → 0.2.9. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.RolloutsAI/mails-agent-email repo_removed

17d ago

🕳

io.github.vkuprin/site-spy mcp repo removed

Repository link removed — the source can no longer be reviewed. Versions: 0.2.2 → 0.3.0. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.vkuprin/site-spy repo_removed

17d ago

💨

io.github.RolloutsAI/mails-mcp-server mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.RolloutsAI/mails-mcp-server unpublished

17d ago

🕳

com.attrove/mcp mcp repo removed

Repository link removed — the source can no longer be reviewed. Versions: 0.5.0 → 0.6.0. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ com.attrove/mcp repo_removed

18d ago

🕳

io.github.CodyWatters/riveter mcp repo removed

Repository link removed — the source can no longer be reviewed. Versions: 0.1.2 → 0.3.0. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.CodyWatters/riveter repo_removed

19d ago

💨

io.github.eminyilmz/high-performance-mcp-server mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.eminyilmz/high-performance-mcp-server unpublished

19d ago

🎭

@blaxel/core mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.3.13 → 0.3.17. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @blaxel/core maintainer_changed

19d ago

🎭

@wonderwhy-er/desktop-commander mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.2.47 → 0.2.48. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @wonderwhy-er/desktop-commander maintainer_changed

19d ago

🎭

@blaxel/telemetry mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.3.13 → 0.3.17. The package is installed about 7,077 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @blaxel/telemetry maintainer_changed

19d ago

🎭

@blaxel/llamaindex mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.3.13 → 0.3.17. The package is installed about 742 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @blaxel/llamaindex maintainer_changed

19d ago

🎭

@blaxel/vercel mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.3.13 → 0.3.17. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @blaxel/vercel maintainer_changed

19d ago

🎭

@blaxel/mastra mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.3.13 → 0.3.17. The package is installed about 755 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @blaxel/mastra maintainer_changed

19d ago

🎭

@blaxel/langgraph mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.3.13 → 0.3.17. The package is installed about 746 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @blaxel/langgraph maintainer_changed

19d ago

☠️

@fatelabs/estelle mcp install script added

Install script added: arbitrary code now runs on `npm i` — it was not there in 0.2.3. Versions: 0.2.3 → 0.2.32. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @fatelabs/estelle install_script_added

19d ago

🎭

@chkp/mcp-utils mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 2,057 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @chkp/mcp-utils maintainer_changed

19d ago

💨

io.github.onepunchtechnology/tinify-ai mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.onepunchtechnology/tinify-ai unpublished

20d ago

🎭

@tangle-network/agent-app mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.46.31 → 0.46.42. The package is installed about 3,037 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @tangle-network/agent-app maintainer_changed

20d ago

🎭

@babylonjs/mcp-servers mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 9.22.2 → 9.23.0. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @babylonjs/mcp-servers maintainer_changed

20d ago

☠️

@realpkuasule/harness-automation mcp install script added

Install script added: arbitrary code now runs on `npm i` — it was not there in 2.5.0. Versions: 2.5.0 → 2.8.11. The package is installed about 363 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @realpkuasule/harness-automation install_script_added

20d ago

🎭

mcp-auth mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.2.0 → 1.0.0-beta.1. The package is installed about 26,177 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ mcp-auth maintainer_changed

21d ago

🎭

@heroku/mcp-server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 8,621 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @heroku/mcp-server maintainer_changed

21d ago

💨

com.memroam/memroam mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ com.memroam/memroam unpublished

22d ago

💨

systems.blacklake/gateway mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ systems.blacklake/gateway unpublished

23d ago

🕳

alvin-bot mcp repo removed

Repository link removed — the source can no longer be reviewed. Versions: 5.101.2 → 5.103.0. The package is installed about 14,362 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ alvin-bot repo_removed

23d ago

🎭

@bangdao-ai/acw-tools mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 1.13.66 → 1.13.68. The package is installed about 13,564 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @bangdao-ai/acw-tools maintainer_changed

24d ago

🎭

@gjsify/devtools-protocol mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 793 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @gjsify/devtools-protocol maintainer_changed

24d ago

🎭

@gjsify/devtools mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @gjsify/devtools maintainer_changed

24d ago

🎭

@gjsify/devtools-cdp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 515 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @gjsify/devtools-cdp maintainer_changed

24d ago

🎭

@gjsify/devtools-mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 499 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @gjsify/devtools-mcp maintainer_changed

24d ago

🎭

@gjsify/devtools-browser mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 490 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @gjsify/devtools-browser maintainer_changed

24d ago

🎭

@gjsify/devtools-nativescript mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 501 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @gjsify/devtools-nativescript maintainer_changed

24d ago

🎭

@hubspot/mcp-server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @hubspot/mcp-server maintainer_changed

25d ago

🎭

@taptap/maker mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 6,034 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @taptap/maker maintainer_changed

25d ago

🎭

@powerhousedao/reactor-mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @powerhousedao/reactor-mcp maintainer_changed

25d ago

🎭

@armature-tech/mcp-analytics mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 2,350 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @armature-tech/mcp-analytics maintainer_changed

25d ago

🎭

@seed-design/docs-mcp mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 2,293 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @seed-design/docs-mcp maintainer_changed

25d ago

☠️

jazz-ai mcp install script added

Install script added: arbitrary code now runs on `npm i` — it was not there in 0.15.6. Versions: 0.15.6 → 0.15.8. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ jazz-ai install_script_added

25d ago

🎭

vision-relay mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.11.1 → 0.12.15. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ vision-relay maintainer_changed

25d ago

💨

io.github.huangdun/tempmd mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.huangdun/tempmd unpublished

26d ago

🎭

@runpod/mcp-server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @runpod/mcp-server maintainer_changed

26d ago

☠️

suppa-mcp-2 mcp install script added

Install script added: arbitrary code now runs on `npm i` — it was not there in 1.14.0. Versions: 1.14.0 → 1.16.1. The package is installed about 1,011 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ suppa-mcp-2 install_script_added

26d ago

💨

io.github.firatciftci/valetkey mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.firatciftci/valetkey unpublished

26d ago

💨

io.github.parikshitmadahar/rightcard-mcp mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.parikshitmadahar/rightcard-mcp unpublished

27d ago

🎭

mcp-remote mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 0.2.1 → 0.2.5. The package is installed about 1,352,008 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ mcp-remote maintainer_changed

27d ago

🎭

@cognium-ai/mcp-server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Versions: 4.6.1 → 4.7.0. The package is installed about 1,597 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @cognium-ai/mcp-server maintainer_changed

27d ago

🎭

@mirofish-ai/pi-gui-use mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @mirofish-ai/pi-gui-use maintainer_changed

27d ago

💨

com.uicockpit/mcp mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ com.uicockpit/mcp unpublished

28d ago

🎭

@ibm/ibmi-mcp-server mcp ownership changed

Package ownership changed — whoever you trusted is no longer the one publishing it. The package is installed about 776 times a week. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ @ibm/ibmi-mcp-server maintainer_changed

28d ago

💨

io.github.applefanaimail-blip/bridgenode-mcp mcp unpublished

Package removed from npm — installs will break, and the name is now free for anyone to claim. Recorded by PulseFeed's daily external re-audit — the previous snapshot is what makes this a change rather than a state.

verify on npm ↗ io.github.applefanaimail-blip/bridgenode-mcp unpublished

29d ago

🎣

law-mcp.toulaw.workers.dev advertised price mismatch

the price listed in the catalog differs from the amount its live 402 challenge requests.

on-chain proof ↗ 0x4eD0e65B… price_bait_switch price_rising

6h ago

🎣

scvd.store advertised price mismatch

the price listed in the catalog differs from the amount its live 402 challenge requests.

on-chain proof ↗ 0xDD350976… price_absurd price_bait_switch price_rising

6h ago

🎣

agents.ai-rook.com advertised price mismatch

the price listed in the catalog differs from the amount its live 402 challenge requests.

on-chain proof ↗ 0xd5f96558… price_bait_switch

6h ago

🧪

topagentx402.vercel.app testnet as production

requires payment on a TEST network — the price shown in dollars is not real money.

receiver not on Base — no on-chain link payto_changed_unconfirmed network_testnet

6h ago

⚠️

api.urbangametheory.xyz asset mismatch

requests an asset that is not USDC, or one that does not match the network it declares.

receiver not on Base — no on-chain link asset_not_usdc network_testnet unverifiable

6h ago

🧪

mechamanda.com testnet as production

requires payment on a TEST network — the price shown in dollars is not real money.

receiver not on Base — no on-chain link amount_is_cap no_exact_offer network_testnet unverifiable

6h ago

🧪

x402-staging.pigsignal.io testnet as production

requires payment on a TEST network — the price shown in dollars is not real money.

receiver not on Base — no on-chain link network_testnet unverifiable

6h ago

🔀

x402-mcp.onrender.com receiver changed

changed its payTo receiver 0x8a89…ff4e → 0x05e1…6357 after a stable baseline. Routine rotation and compromise look identical from outside — re-verify before paying.

on-chain proof ↗ 0x05e1720b… payto_changed_unconfirmed

6h ago

🔀

inference.hergertsynthora.com receiver changed

changed its payTo receiver 0x6d9f…c167 → 0xef87…5e06 after a stable baseline. Routine rotation and compromise look identical from outside — re-verify before paying.

on-chain proof ↗ 0xef879bfd… payto_changed_unconfirmed

6h ago

🔀

x402.coinstats.app receiver changed

changed its payTo receiver 0x0750…162f → 0xa2ad…00c7 after a stable baseline. Routine rotation and compromise look identical from outside — re-verify before paying.

on-chain proof ↗ 0xa2ad8183… payto_changed_unconfirmed

6h ago

🔀

api.hergertsynthora.com receiver changed

changed its payTo receiver 0x6d9f…c167 → 0xef87…5e06 after a stable baseline. Routine rotation and compromise look identical from outside — re-verify before paying.

on-chain proof ↗ 0xef879bfd… payto_changed_unconfirmed price_rising

6h ago

🔀

safe-to-trade.hergertsynthora.com receiver changed

changed its payTo receiver 0x6d9f…c167 → 0xef87…5e06 after a stable baseline. Routine rotation and compromise look identical from outside — re-verify before paying.

on-chain proof ↗ 0xef879bfd… payto_changed_unconfirmed

6h ago

Security Disclosures

Active incidents