wayspiritmcp-weather

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: kam193 (c3dbe830c7b2364daef2e4634c16062b86b0b26b88f95533e9413aa91bc646fd)
Package seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it seems to be research.


---

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.


Campaign: 2025-11-wayspirit


Reasons (based on the campaign):


 - llm-threat

Compromised versions (56)

• 0.8.0
• 0.7.15
• 0.7.14
• 0.7.13
• 0.7.12
• 0.7.11
• 0.7.10
• 0.7.9
• 0.7.8
• 0.7.7
• 0.7.6
• 0.7.5
• 0.7.4
• 0.7.3
• 0.7.2
• 0.7.1
• 0.7.0
• 0.6.3
• 0.6.2
• 0.6.1
• 0.6.0
• 0.5.1
• 0.5.0
• 0.4.6
• 0.4.5
• 0.4.4
• 0.4.3
• 0.4.2
• 0.4.1
• 0.4.0
• 0.3.4
• 0.3.3
• 0.3.2
• 0.3.1
• 0.3.0
• 0.2.9
• 0.2.8
• 0.2.7
• 0.2.6
• 0.2.5
• 0.2.4
• 0.2.3
• 0.2.2
• 0.2.1
• 0.1.11
• 0.1.10
• 0.1.9
• 0.1.8
• 0.1.7
• 0.1.6
• 0.1.5
• 0.1.4
• 0.1.3
• 0.1.2
• 0.1.1
• 0.1.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.