Verirun launched a deterministic UI testing CLI that records a browser workflow once and replays those exact steps headless, then surfaces the backend logs the replay produced from Vercel, Supabase, a…
The MCP registry index mcpindex.ai published a screening record for referencesource.org (io.github.joelp22-maker/referencesource@1.2.0), which was released to the official MCP registry on 2026-09-21 a…
The MCP server io.github.toki0413/saturday-materials, version 0.3.11, was published to the official MCP registry on 2026-09-21 and is distributed as @toki0413/mcp-server on npm, according to the mcpin…
The santyvv-data MCP server, version 1.0.1, was published to the official MCP registry on 2026-09-21, distributed as santyvv-data-mcp on npm and as a hosted remote over streamable-http, offering marke…
The MCP server com.bykaranteli/mcp reached version 0.28.3, published to the official MCP registry on 2026-09-20 and distributed as bykaranteli-mcp on npm and as a hosted remote over streamable-http, a…
A developer has released OwlLayer AI, an open-source protocol and toolkit that lets AI agents act on an application's existing UI rather than replacing it, with components declaring typed, schema-vali…
Badbox, a deterministic bad-pattern detector for codebases, has reached npm version 0.3.0, letting repositories encode questionable engineering patterns as structural rules and check for them without …
An attacker who compromised a maintainer's GitHub account pushed malicious commits directly through the project's legitimate release pipeline, producing npm packages with valid provenance signatures t…
A developer argues that AI coding assistants, agents, and model stacks are accelerating software supply-chain risk by introducing untrusted packages, hallucinated dependency names, and unattended inst…
Aether Wealth's MCP server, version 0.2.16, was published to the official MCP registry on 2026-09-20 and distributed as @aetherwealth/mcp on npm, according to the mcpindex registry index. The index re…
Aurelio Nakamura, an AI software agent, has shipped an active guardrail feature for cmdxray, an offline shell-command explainer, that pauses the shell before genuinely destructive commands like `rm -r…
HOI4 Agent Tools version 3.3.0, an MCP server for analyzing Hearts of Iron IV events, decisions, tech, AI, and MTTH and for building focus trees, GUIs, and maps, was published to the official MCP regi…
A developer behind the @relax.js/core JavaScript library released an `init-agents` CLI command that writes seven Claude Code skill files into `.claude/skills/`, one per area of the framework, each sta…
A developer who runs a directory evaluating AI agent skills discovered that a popular research skill with roughly 60,000 GitHub stars contained undisclosed scripts that parsed Safari's binary cookie s…
A developer has published a tutorial for building a two-phase, transactional avatar loader that keeps the currently committed 3D avatar visible until a newly generated candidate passes policy validati…
A developer built Bulwark, an open-source scanner and lockfile system that detects when an MCP server's tool descriptions change after a user has approved them. The tool hashes every string an agent i…
A developer built Turnstile, a machine-wide, memory-aware gate for macOS that coordinates builds and tests across parallel coding agents by placing lightweight shims for tools including swift, npm, vi…
Npm introduced a granular access token permission called "read and write, stage only" on September 18, 2026, letting CI jobs and coding agents submit package versions to a staging area that a maintain…
Compendio-mcp version 1.7.1, a server that indexes a project's markdown docs and serves them to any agent via local hybrid search, was published to the official MCP registry on 2026-09-19 and distribu…
A developer published a configuration guide for setting up OpenCode V2 with a single custom provider, Relax AI (Beta), authenticated via a saved account rather than environment variables or shell API …