CrowdStrike's Counter Adversary Operations assessed with high confidence that a financially motivated threat actor likely used a large language model to write PhantomRaven, a JavaScript information st…
A developer released agent-usage 0.10.0, an MIT-licensed local dashboard on npm that charts multi-agent usage split by agent, billing domain, and model. The tool tracks quota and spend across Codex, C…
A new 18-chapter book, "Claude Code from Source," reverse-engineers Anthropic's Claude Code AI coding agent from the TypeScript source maps that shipped with the tool on npm, which included a sourcesC…
GEML, a plain-text document format designed to be edited in place one section at a time, published version 1.11.1 to the official MCP registry on 2026-09-18 and is distributed as @geml/geml on npm, ac…
A blog post warns that developers should treat installing anything on someone else's computer as a deliberate decision, citing git pre-commit hooks, `npx`/`uvx` commands, and LLM context files such as…
Developer alxcrt published is-odd-jev, an npm package that determines whether a number is odd using the TypeSafe "jev-latest" model and returns a calibrated probability rather than a boolean, e.g. { o…
The Verax project released an open-source MCP server, Apache-2.0 licensed, that sits between an AI agent and its tools, passing every tool call through a policy gate and writing a signed decision reco…
Security researcher Liran Tal told AI Native DevCon London that agent skills are supply chain components that need the same review, provenance, scanning and update discipline applied to package ecosys…
AtlasFetch v0.1.4, an MCP server that reverse geocodes coordinates to country, region and municipality and matches user geofences, was published to the official MCP registry on 2026-09-17 and distribu…
Eco Router, an MCP server that ranks AWS, Google Cloud and Azure regions by grid carbon intensity and latency, was published to the official MCP registry on 2026-09-17 as version 0.1.0 under the npm p…
The MCP server io.github.execuro/sw-dev-knowledge-base-mcp reached version 0.1.6, published to the official MCP registry on 2026-09-17 and distributed on npm as @execuro-sw-ecosystem/sw-dev-knowledge-…
A developer at NeuraGrowth found that nine of ten pinned MCP package versions in a guide failed to resolve in the npm registry, causing 404 errors at install time even though the packages themselves e…
An independent developer released Jev Logs, an MIT-licensed open-source layer that scores and routes OpenTelemetry logs with TypeSafe's Jev model before they reach a more expensive reasoning LLM. The …
Mockzilla's MCP server io.github.mockzilla/mockzilla-mcp reached version 0.2.22, published to the official MCP registry on 2026-09-17 and distributed as @mockzilla/mcp on npm, according to the mcpinde…
A developer maintains iOS Agent Skill, an open-source collection of Swift guidance, local references and MCP tools, and the npm package ios-agent-mcp, which bundles Swift review tools, Apple reference…
The Gadriel AI Security Harness, version 1.4.1, was published to the official MCP registry on 2026-09-17 and is distributed as gadriel on npm, offering local SAST, secrets, dependency, container, conf…
Version 20.21.2 of io.github.dcostenco/prism-coder, a session-memory server for coding agents distributed as prism-mcp-server on npm, was published to the official MCP registry on 2026-09-17, accordin…
A developer discovered that an AI-generated LinkedIn account, "GyaanSetu AI (Artificial Intelligence)," had published a first-person post impersonating them and their npm package @bananacool467/ui-too…
Webb-Ventures published autorouter version 0.2.5 to the official MCP registry on 2026-09-16, distributed as autorouter-mcp on npm and filed under Search by mcpindex. The MCP capability router replaces…
MinerU v1.2.0, a document parsing MCP server for PDFs, images, DOCX and PPTX with OCR and batch processing, was published to the official MCP registry on 2026-09-16 as the npm package mineru-mcp, acco…