{"id":"smshub.dev/smshub","name":"smshub","commands":["smshub-cli"],"examples":[{"run":"smshub-cli login --key <api-key>","does":"Save your smshub.dev API key from Settings > API Keys"},{"run":"smshub-cli rent --area <area-code>","does":"Rent a US number; prints a CoinPay link and waits for payment"},{"run":"smshub-cli numbers","does":"List your numbers with their expiry dates"},{"run":"smshub-cli otp <number> --wait 60","does":"Print the next verification code the number receives"}],"description":"CLI, TUI and MCP server for renting a phone number and receiving SMS verification codes.","homepage":"https://smshub.dev","repository":"https://github.com/profullstack/smshub","license":"MIT","agentic":true,"latest_version":"1.11.0","vendor":"Profullstack","install":"curl -fsSL https://smshub.dev/cli/install.sh | sh","publisher":"profullstack","npm":"@profullstack/smshub","w3bs":"w3bs install smshub.dev/smshub","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":431,"summary":{"critical":0,"high":2,"medium":4,"low":8,"info":0},"malware":0,"truncated":false,"version":"1.11.0","sources":{"installer":"https://smshub.dev/cli/install.sh","installerSha256":"56a9890be7eefc0b1b3cb18720e54c1abf02d0ae1312701ffc7d3a6bf3143380","repository":"github.com/profullstack/smshub"},"notes":[],"scannedAt":"2026-11-01T22:56:42.509Z","findings":[{"ruleId":"sh-unquoted-expansion-destructive","title":"unquoted expansion in a destructive command","severity":"high","category":"code","cwe":"CWE-78","file":"source/public/install.sh","line":67,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/public/install.sh","line":89,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"medium","category":"code","cwe":"CWE-494","file":"source/public/install.sh","line":133,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/src/app/numbers/page.tsx","line":180,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/src/components/inbox-client.tsx","line":35,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/src/components/pit-footer.tsx","line":17,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/providers/__tests__/twilio.test.ts","line":24,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/providers/__tests__/twilio.test.ts","line":46,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/providers/__tests__/twilio.test.ts","line":60,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/providers/__tests__/twilio.test.ts","line":78,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/vault/__tests__/vault.test.ts","line":117,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/lib/webhooks/__tests__/supabase-store.test.ts","line":11,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/supabase/config.toml","line":287,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/supabase/config.toml","line":319,"malware":false}]}}