← Back to search Server uses network capabilities via: fetch(), http Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, open(), os, path, shutil, tempfile Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess Server uses env_vars capabilities via: os.environ, process.env
Pump SDK MCP Server
Pump SDK MCP — Solana token launchpad, bonding curves, vanity addresses, key management
? Not scanned yet
Versions
1.0.0latestfirst seen Jun 5, 2026
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 194
medium
Suspicious package name: lodash-es
high
Hardcoded OAuth client secret in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/packages/gateway/tests/edge.test.ts
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 179 direct dependencies
medium
Suspicious package name: react-dom
medium
Suspicious package name: react-native
medium
Vulnerable dependency: tsup@8.0.0 (GHSA-3mv9-4h5g-vhg3)
medium
Vulnerable dependency: ws@8.18.0 (GHSA-58qx-3vcg-4xpx)
medium
Vulnerable dependency: ws@8.18.0 (GHSA-96hv-2xvq-fx4p)
medium
Vulnerable dependency: @solana/web3.js@1.91.0 (GHSA-8m45-2rjm-j347)
medium
Vulnerable dependency: bn.js@5.2.2 (GHSA-378v-28hj-76wf)
medium
Vulnerable dependency: next@14.2.18 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@14.2.18 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@14.2.18 (GHSA-3h52-269p-cp9r)
medium
Vulnerable dependency: next@14.2.18 (GHSA-3x4c-7xq6-9pq8)
medium
Vulnerable dependency: next@14.2.18 (GHSA-4342-x723-ch2f)
medium
Vulnerable dependency: next@14.2.18 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@14.2.18 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@14.2.18 (GHSA-5j59-xgg2-r9c4)
medium
Vulnerable dependency: next@14.2.18 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@14.2.18 (GHSA-7m27-7ghc-44w9)
medium
Vulnerable dependency: next@14.2.18 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@14.2.18 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@14.2.18 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@14.2.18 (GHSA-9g9p-9gw9-jx7f)
medium
Vulnerable dependency: next@14.2.18 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@14.2.18 (GHSA-f82v-jwr5-mffw)
medium
Vulnerable dependency: next@14.2.18 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@14.2.18 (GHSA-g5qg-72qw-gw5v)
medium
Vulnerable dependency: next@14.2.18 (GHSA-ggv3-7p47-pfv8)
medium
Vulnerable dependency: next@14.2.18 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@14.2.18 (GHSA-h25m-26qc-wcjf)
medium
Vulnerable dependency: next@14.2.18 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@14.2.18 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@14.2.18 (GHSA-mwv6-3258-q52c)
medium
Vulnerable dependency: next@14.2.18 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@14.2.18 (GHSA-q4gf-8mx6-v5v3)
medium
Vulnerable dependency: next@14.2.18 (GHSA-qpjv-v59x-3qc4)
medium
Vulnerable dependency: next@14.2.18 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@14.2.18 (GHSA-wfc6-r584-vfw7)
medium
Vulnerable dependency: next@14.2.18 (GHSA-xv57-4mr9-wg8v)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq)
medium
Vulnerable dependency: bn.js@5.2.1 (GHSA-378v-28hj-76wf)
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: turbo@2.5.0 (GHSA-3qcw-2rhx-2726)
medium
Vulnerable dependency: turbo@2.5.0 (GHSA-hcf7-66rw-9f5r)
medium
Vulnerable dependency: turbo@2.5.4 (GHSA-3qcw-2rhx-2726)
medium
Vulnerable dependency: turbo@2.5.4 (GHSA-hcf7-66rw-9f5r)
medium
Vulnerable dependency: @babel/core@7.25.2 (GHSA-4x5r-pxfx-6jf8)
medium
Vulnerable dependency: @babel/runtime@7.25.0 (GHSA-968p-4wvh-cqc8)
medium
Vulnerable dependency: langchain@0.1.37 (GHSA-hc5w-c9f8-9cc4)
medium
Vulnerable dependency: langchain@0.1.37 (GHSA-r399-636x-v7f6)
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-f23m-r3pf-42rh)
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-r5fr-rjxr-66jc)
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-xxjr-mmjv-4gpg)
medium
Vulnerable dependency: @babel/runtime@7 (GHSA-968p-4wvh-cqc8)
medium
Vulnerable dependency: ajv@8 (GHSA-2g4f-4pwh-qvx6)
medium
Vulnerable dependency: zod@3 (GHSA-m95q-7qp3-xv42)
medium
Vulnerable dependency: vitest@0.34.6 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: next@14.0.0 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@14.0.0 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@14.0.0 (GHSA-3h52-269p-cp9r)
medium
Vulnerable dependency: next@14.0.0 (GHSA-3x4c-7xq6-9pq8)
medium
Vulnerable dependency: next@14.0.0 (GHSA-4342-x723-ch2f)
medium
Vulnerable dependency: next@14.0.0 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@14.0.0 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@14.0.0 (GHSA-5j59-xgg2-r9c4)
medium
Vulnerable dependency: next@14.0.0 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@14.0.0 (GHSA-7gfc-8cq8-jh5f)
medium
Vulnerable dependency: next@14.0.0 (GHSA-7m27-7ghc-44w9)
medium
Vulnerable dependency: next@14.0.0 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@14.0.0 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@14.0.0 (GHSA-9g9p-9gw9-jx7f)
medium
Vulnerable dependency: next@14.0.0 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@14.0.0 (GHSA-f82v-jwr5-mffw)
medium
Vulnerable dependency: next@14.0.0 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@14.0.0 (GHSA-fr5h-rqp8-mj6g)
medium
Vulnerable dependency: next@14.0.0 (GHSA-g5qg-72qw-gw5v)
medium
Vulnerable dependency: next@14.0.0 (GHSA-g77x-44xx-532m)
medium
Vulnerable dependency: next@14.0.0 (GHSA-ggv3-7p47-pfv8)
medium
Vulnerable dependency: next@14.0.0 (GHSA-gp8f-8m3g-qvj9)
medium
Vulnerable dependency: next@14.0.0 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@14.0.0 (GHSA-h25m-26qc-wcjf)
medium
Vulnerable dependency: next@14.0.0 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@14.0.0 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@14.0.0 (GHSA-mwv6-3258-q52c)
medium
Vulnerable dependency: next@14.0.0 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@14.0.0 (GHSA-q4gf-8mx6-v5v3)
medium
Vulnerable dependency: next@14.0.0 (GHSA-qpjv-v59x-3qc4)
medium
Vulnerable dependency: next@14.0.0 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@14.0.0 (GHSA-xv57-4mr9-wg8v)
medium
Vulnerable dependency: next@13.4.7 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@13.4.7 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@13.4.7 (GHSA-3h52-269p-cp9r)
medium
Vulnerable dependency: next@13.4.7 (GHSA-3x4c-7xq6-9pq8)
medium
Vulnerable dependency: next@13.4.7 (GHSA-4342-x723-ch2f)
medium
Vulnerable dependency: next@13.4.7 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@13.4.7 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@13.4.7 (GHSA-5j59-xgg2-r9c4)
medium
Vulnerable dependency: next@13.4.7 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@13.4.7 (GHSA-77r5-gw3j-2mpf)
medium
Vulnerable dependency: next@13.4.7 (GHSA-7gfc-8cq8-jh5f)
medium
Vulnerable dependency: next@13.4.7 (GHSA-7m27-7ghc-44w9)
medium
Vulnerable dependency: next@13.4.7 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@13.4.7 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@13.4.7 (GHSA-9g9p-9gw9-jx7f)
medium
Vulnerable dependency: next@13.4.7 (GHSA-c59h-r6p8-q9wc)
medium
Vulnerable dependency: next@13.4.7 (GHSA-f82v-jwr5-mffw)
medium
Vulnerable dependency: next@13.4.7 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@13.4.7 (GHSA-fq54-2j52-jc42)
medium
Vulnerable dependency: next@13.4.7 (GHSA-fr5h-rqp8-mj6g)
medium
Vulnerable dependency: next@13.4.7 (GHSA-g5qg-72qw-gw5v)
medium
Vulnerable dependency: next@13.4.7 (GHSA-g77x-44xx-532m)
medium
Vulnerable dependency: next@13.4.7 (GHSA-ggv3-7p47-pfv8)
medium
Vulnerable dependency: next@13.4.7 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@13.4.7 (GHSA-h25m-26qc-wcjf)
medium
Vulnerable dependency: next@13.4.7 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@13.4.7 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@13.4.7 (GHSA-mwv6-3258-q52c)
medium
Vulnerable dependency: next@13.4.7 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@13.4.7 (GHSA-q4gf-8mx6-v5v3)
medium
Vulnerable dependency: next@13.4.7 (GHSA-qpjv-v59x-3qc4)
medium
Vulnerable dependency: next@13.4.7 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@13.4.7 (GHSA-xv57-4mr9-wg8v)
medium
Vulnerable dependency: vitest@latest (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@latest (GHSA-9crc-q9x8-hgqq)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-7fh5-64p2-3v2j)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-356w-63v5-8wf4)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4r4m-qw57-chr8)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-p9ff-h696-f583)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-vg6x-rcgg-rjx6)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-x574-m823-4x7w)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-xcj6-pq6g-qj4x)
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/examples/27-decode-trade-events.ts:133
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/src/onlineSdk.ts:2834
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/typescript/src/utils/base58.ts:11
medium
High-entropy string (5.95 bits/char) in nirholas-pump-fun-sdk-9527f26/typescript/src/lib/security.ts:237
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/telegram-bot/src/monitor.ts:608
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pump-fun-repos/pump-segments-sdk/src/client.ts:138
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/api/contract-scanner/check-honeypot.ts:9
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/api/contract-scanner/scan-token.ts:9
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/api/ens-lookup/resolve-ens.ts:9
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/api/pump-fun-sdk/price-quote.ts:7
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/vanity-demo/public/grind.worker.js:8
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/vanity-demo/src/lib/pump.ts:40
medium
High-entropy string (5.86 bits/char) in nirholas-pump-fun-sdk-9527f26/vanity-demo/src/app/grind/page.tsx:5
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/x402/src/facilitator.ts:69
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/x402/src/facilitator.ts:212
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/x402/src/client.ts:249
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/x402/src/payment.ts:161
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/telegram-bot/src/pump-event-monitor.ts:372
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/claim-bot/src/rpc-monitor.ts:446
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/claim-bot/src/claim-logs.ts:70
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/channel/src/claim-monitor.ts:295
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/channel/src/claim-monitor.ts:456
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/channel/src/event-monitor.ts:198
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/core/src/solana/decoders.ts:68
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/core/src/monitor/ClaimMonitor.ts:188
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/allclaims/src/claim-monitor.ts:106
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/allclaims/src/claim-monitor.ts:416
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/allclaims/src/claim-monitor.ts:586
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/monitor/src/pump-event-monitor.ts:372
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/pumpkit/packages/monitor/src/monitor.ts:608
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/channel-bot/src/claim-monitor.ts:90
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/channel-bot/src/claim-monitor.ts:346
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/channel-bot/src/claim-monitor.ts:509
medium
Buffer.from base64 in nirholas-pump-fun-sdk-9527f26/channel-bot/src/event-monitor.ts:254
info
package.json metadata
info
Transport: stdio
info
Required env vars (122)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 1517 components
critical
Database URL with Password found in nirholas-pump-fun-sdk-9527f26/docs/solanaappkit.md
critical
Database URL with Password found in nirholas-pump-fun-sdk-9527f26/pump-fun-repos/carbon/packages/cli/src/lib/scaffold.ts
critical
Database URL with Password found in nirholas-pump-fun-sdk-9527f26/packages/plugin.delivery/docs/SPERAXOS_PLUGIN_COMPLETE_GUIDE.md
medium
No build provenance detected (SLSA L0)