← Back to search

Pump SDK MCP Server

nirholas Scanned 7d ago

Pump SDK MCP — Solana token launchpad, bonding curves, vanity addresses, key management

? Not scanned yet

Versions

1.0.0latest
first seen Jun 5, 2026

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch(), http
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, open(), os, path, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 194

medium
Suspicious package name: lodash-es dependency_analyzer · 60%
high
Hardcoded OAuth client secret in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/packages/gateway/tests/edge.test.ts auth_checker · 95%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 179 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-native dependency_analyzer · 60%
medium
Vulnerable dependency: tsup@8.0.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.0 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.0 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
medium
Vulnerable dependency: @solana/web3.js@1.91.0 (GHSA-8m45-2rjm-j347) dependency_analyzer · 95%
medium
Vulnerable dependency: bn.js@5.2.2 (GHSA-378v-28hj-76wf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-3h52-269p-cp9r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-4342-x723-ch2f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-5j59-xgg2-r9c4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-7m27-7ghc-44w9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-f82v-jwr5-mffw) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-g5qg-72qw-gw5v) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-h25m-26qc-wcjf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-mwv6-3258-q52c) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-qpjv-v59x-3qc4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.2.18 (GHSA-xv57-4mr9-wg8v) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: bn.js@5.2.1 (GHSA-378v-28hj-76wf) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.5.0 (GHSA-3qcw-2rhx-2726) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.5.0 (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.5.4 (GHSA-3qcw-2rhx-2726) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.5.4 (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: @babel/core@7.25.2 (GHSA-4x5r-pxfx-6jf8) dependency_analyzer · 95%
medium
Vulnerable dependency: @babel/runtime@7.25.0 (GHSA-968p-4wvh-cqc8) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.1.37 (GHSA-hc5w-c9f8-9cc4) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.1.37 (GHSA-r399-636x-v7f6) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-f23m-r3pf-42rh) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-r5fr-rjxr-66jc) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-xxjr-mmjv-4gpg) dependency_analyzer · 95%
medium
Vulnerable dependency: @babel/runtime@7 (GHSA-968p-4wvh-cqc8) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@3 (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@0.34.6 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-3h52-269p-cp9r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-4342-x723-ch2f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-5j59-xgg2-r9c4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-7gfc-8cq8-jh5f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-7m27-7ghc-44w9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-f82v-jwr5-mffw) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-fr5h-rqp8-mj6g) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-g5qg-72qw-gw5v) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-g77x-44xx-532m) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-gp8f-8m3g-qvj9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-h25m-26qc-wcjf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-mwv6-3258-q52c) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-qpjv-v59x-3qc4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.0.0 (GHSA-xv57-4mr9-wg8v) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-3h52-269p-cp9r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-4342-x723-ch2f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-5j59-xgg2-r9c4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-77r5-gw3j-2mpf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-7gfc-8cq8-jh5f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-7m27-7ghc-44w9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-c59h-r6p8-q9wc) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-f82v-jwr5-mffw) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-fq54-2j52-jc42) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-fr5h-rqp8-mj6g) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-g5qg-72qw-gw5v) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-g77x-44xx-532m) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-h25m-26qc-wcjf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-mwv6-3258-q52c) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-qpjv-v59x-3qc4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@13.4.7 (GHSA-xv57-4mr9-wg8v) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@latest (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@latest (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-7fh5-64p2-3v2j) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/examples/27-decode-trade-events.ts:133 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/src/onlineSdk.ts:2834 entropy_analyzer · 75%
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/typescript/src/utils/base58.ts:11 entropy_analyzer · 52%
medium
High-entropy string (5.95 bits/char) in nirholas-pump-fun-sdk-9527f26/typescript/src/lib/security.ts:237 entropy_analyzer · 54%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/telegram-bot/src/monitor.ts:608 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pump-fun-repos/pump-segments-sdk/src/client.ts:138 entropy_analyzer · 75%
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/api/contract-scanner/check-honeypot.ts:9 entropy_analyzer · 52%
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/api/contract-scanner/scan-token.ts:9 entropy_analyzer · 52%
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/api/ens-lookup/resolve-ens.ts:9 entropy_analyzer · 52%
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/api/pump-fun-sdk/price-quote.ts:7 entropy_analyzer · 52%
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/vanity-demo/public/grind.worker.js:8 entropy_analyzer · 52%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/vanity-demo/src/lib/pump.ts:40 entropy_analyzer · 75%
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/vanity-demo/src/app/grind/page.tsx:5 entropy_analyzer · 52%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/x402/src/facilitator.ts:69 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/x402/src/facilitator.ts:212 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/x402/src/client.ts:249 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/x402/src/payment.ts:161 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/telegram-bot/src/pump-event-monitor.ts:372 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/claim-bot/src/rpc-monitor.ts:446 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/claim-bot/src/claim-logs.ts:70 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/channel/src/claim-monitor.ts:295 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/channel/src/claim-monitor.ts:456 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/channel/src/event-monitor.ts:198 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/core/src/solana/decoders.ts:68 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/core/src/monitor/ClaimMonitor.ts:188 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/allclaims/src/claim-monitor.ts:106 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/allclaims/src/claim-monitor.ts:416 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/allclaims/src/claim-monitor.ts:586 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/monitor/src/pump-event-monitor.ts:372 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/monitor/src/monitor.ts:608 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/channel-bot/src/claim-monitor.ts:90 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/channel-bot/src/claim-monitor.ts:346 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/channel-bot/src/claim-monitor.ts:509 entropy_analyzer · 75%
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/channel-bot/src/event-monitor.ts:254 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (122) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1517 components sbom_generator · 100%
critical
Database URL with Password found in nirholas-pump-fun-sdk-9527f26/docs/solanaappkit.md secret_scanner · 85%
critical
Database URL with Password found in nirholas-pump-fun-sdk-9527f26/pump-fun-repos/carbon/packages/cli/src/lib/scaffold.ts secret_scanner · 85%
critical
Database URL with Password found in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/docs/SPERAXOS_PLUGIN_COMPLETE_GUIDE.md secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%