public evidence dossier

sh.jsmon/mcp

Jsmon

Discover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface

Latest visible observation: 2026-10-20T22:38:21.444Z

Run a preflight Open expert evidence

Identity

publisher identityVendor-official for jsmon (DNS-verified jsmon.sh)

registry titleJsmon · observed 2026-09-21T15:36:36.39968Z

namespacedomain · observed 2026-09-21T15:36:36.39968Z

registry statusactive · observed 2026-09-21T15:36:36.39968Z

origin systemshosted_endpoint, registry · observed 2026-10-20T22:38:21.444Z

Distribution

repositoryUnknown · observed 2026-09-22 17:32:30

npm packageUnknown · observed 2026-09-22 17:32:30

PyPI packageUnknown

hosted endpointhttps://mcp.jsmon.sh/mcp · observed 2026-10-19T01:31:33.009Z

Maintenance and public findings

repository pushedUnknown

repository archivedUnknown · observed 2026-09-22 17:32:30

npm deprecatedUnknown · observed 2026-09-22 17:32:30

OSV package advisoryUnknown · observed 2026-09-22 17:32:30

Hosted liveness

last endpoint observationhealthy · observed 2026-10-19T01:31:33.009Z

reported MCP revisionunknown · observed 2026-10-20 08:02:18

Limits

This dossier reports public evidence. It is not a safety, code, permission, scope, runtime, or penetration-test verdict. Missing evidence remains unknown.