package agenthub-multiagent-mcp
Block
Reported malicious in threat research: every version of this package should be treated as harmful. Do not install.
- Latest version
- 1.71.0
- First published
- 10 months ago
- Maintainers
- 1
- Catalog grade
- D — High risk signals
- Est. context load
- ~850 tokens / turn (~5 tool schemas, 0.43% of 200k context)
Threat reports
- MaliciousMalicious code in agenthub-multiagent-mcp (npm) Affected versions: 1.57.0
- MaliciousMalicious code in agenthub-multiagent-mcp (npm) Affected versions: 1.57.0
If it is already installed, remove it:
# DO NOT INSTALL agenthub-multiagent-mcp — remove immediately if present:
npm uninstall agenthub-multiagent-mcpBased on public adoption and transparency signals as of Oct 22, 2026. Our opinion, not a code audit or security guarantee. Answers change through the day.