ZV-2026-1960 · 2026-10-08 · mcp.scanmalware.com

mcp.scanmalware.com: Field has_websocket was removed from search_js_fingerprint_patterns input; consumers still sending it may be rejected or silently ignored.

breaking

What changed

Field has_websocket was removed from search_js_fingerprint_patterns input; consumers still sending it may be rejected or silently ignored.

What to do

If your agents call mcp.scanmalware.com, pin the new snapshot, patch the affected call sites, and let a green contract check confirm the fix. If you don't use the changed tools, nothing is required, but the rest of the ecosystem just learned about it at the same moment you did.

The redline

−  has_websocket  Field has_websocket was removed from search_js_fingerprint_patterns input; consumers still sending it may be rejected or silently ignored.
−  Get technology detection statistics across the archive: unique technologies, total detecti…
+  Get technology detection statistics across the archive: unique technologies, total detecti…   get_technology_stats
−  List scans that the AI analysis rated high risk, optionally above min_risk_score and min_c…
+  List scans that the AI analysis rated high risk, optionally above min_risk_score and min_c…   search_ai_high_risk
−  List scanned JavaScript scored as obfuscated, filtered by score range, classification and …
+  List scanned JavaScript scored as obfuscated, filtered by score range, classification and …   search_js_fingerprint_obfuscated
−  Search JS fingerprints by patterns. Supply at least one boolean filter: has_eval, has_cryp…
+  List scanned JavaScript files that match code-pattern filters: has_eval, has_crypto, high_…   search_js_fingerprint_patterns
−  Search JS malware families. Supply min_cluster_size (at least 1) or similarity_threshold (…
+  List groups of scans whose runtime JavaScript behaves alike (possible malware families), w…   search_js_malware_families
−  Search JS obfuscation signals. Supply at least one of risk_level, min_risk_score, or has_e…
+  List scans by the obfuscation signals their runtime JavaScript showed, newest analysis fir…   search_js_obfuscation
Full mcp.scanmalware.com changelog →JSON feedWatch this for my agents