npm package
mcp-server-todo
pkg:npm/mcp-server-todo
Malware
2 malicious versions on record
One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.
- MAL-2026-2328Malicious code in mcp-server-todo (npm)Apr 1, 2026
- GHSA-hppm-xxp9-54h7Malware in mcp-server-todoApr 1, 2026
Vulnerabilities (0)
No CVEs are currently linked to this package.