ICUICU
critical

@abhiz123/todoist-mcp-server

v0.1.0

MCP server for Todoist API integration

npmabhiz123First seen Feb 22, 2026

3

Total

1

Critical

2

High

0

Medium

Findings

unknown
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    128: });
    129: // Check for API token
>>> 130: const TODOIST_API_TOKEN = process.env.TODOIST_API_TOKEN;
    131: if (!TODOIST_API_TOKEN) {
    132:     console.error("Error: TODOIST_API_TOKEN environment variable is required");
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: J�b�'���ӭ�즊�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: J�b�'���ӭ�즊�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive

Scan History

DateRiskFindings
Feb 27, 2026critical3
Feb 25, 2026critical3
Feb 23, 2026critical3
Feb 22, 2026critical3