Below is the list of direct dependencies declared by the software package through its manifest.
Name
Version
failIncident: Malware
Scanned: 4 days ago
postmark-mcp
Universal Postmark MCP server using official SDK
License: Permissive (MIT)
Published: 4 months ago
SAFE Assessment
Compliance
Licenses
No license compliance issues
Secrets
No sensitive information found
Security
Vulnerabilities
No known vulnerabilities detected
Hardening
No application hardening issues
Threats
Tampering
2 malware-like behaviors found
Malware
4 supply chain attack artifacts
IMPORTANT: All versions of this package have been malicious
INCIDENTS FOR THIS VERSION:
malware
malware
malware
malware
Learn more about malware detection