io.github.acme/lookalike

Score 94 · 1 finding · last scanned 2026-08-30T00:00:00+00:00

• Typosquat of a known MCP server package name (MCP-STATIC-006, AST04)

  Severity: high · Confidence: medium

  "@modelcontextprotocol/server-filesystemx" is 1 edit(s) from known package "@modelcontextprotocol/server-filesystem"

  Double-check the exact package name against the official registry/npm page before installing; pin the verified name and version.