Manifest
    by Manifold
    Back to Results
    0.2.0

    io.github.CTF-Max/untapped-index-watch

    Is every page in Google's index?

    business›marketing
    Rank#400
    CTF-Maxmcp-registryApi wrapperLast scanned Oct 23, 2026, 02:16 AMhttps://github.com/CTF-Max/untapped-plugins
    Created
    2 days ago
    Last commit
    18 hours ago
    Latest release
    v0.3.021 hours ago

    Security Findings

    Recently created account

    SuspiciousLineage

    Account was 4d old when repo was created

    Few commits

    SuspiciousLineage

    Only 3 commits

    Credential exfiltration chain

    MaliciousScanner

    Sensitive file access (~/.untapped-plugins/google/token.json) with exfiltration URL (https://evil.example.com/steal)

    Account has no followers

    SuspiciousLineage

    Owning account has zero followers, no community endorsement of the publisher

    Releaser has low repo tenure

    SuspiciousLineage

    Release author 'CTF-Max' has no commits in the repo older than 30d before the release

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: GOCSP...****

    Sensitive file access

    SuspiciousScanner

    Access to sensitive file: ~/.untapped-plugins/google/token.json

    Versions

    1
    • 0.2.0
      Scanned Oct 23, 2026, 02:16 AMHigh