bgpt-paper-search

SUSPICIOUS. The core capability matches the stated paper-search purpose, and the primary data flow to bgpt.pro is coherent. Risk comes from the recommended execution path: unpinned bunx-installed CLIs, including a third-party mcp-remote bridge and a publisher relationship that is not cleanly same-org verified for bgpt-mcp. This looks more like a legitimate but trust-broadened integration than malware.