
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@agentforge-ai/core
Advanced tools
Core agent primitives, sandbox integration, and MCP server for AgentForge
Core agent primitives, secure sandbox execution, and MCP server for the AgentForge framework.
npm install @agentforge-ai/core
import { Agent, SandboxManager, MCPServer } from '@agentforge-ai/core';
// Create an agent
const agent = new Agent({
id: 'my-agent',
name: 'My Agent',
instructions: 'You are a helpful assistant.',
model: 'openai/gpt-4o-mini',
});
// Generate a response
const response = await agent.generate('Hello, world!');
// Execute code securely
const sandbox = new SandboxManager({ timeout: 10000 });
const result = await sandbox.runCode('console.log("Hello from sandbox!")');
// Register tools with MCP
const mcp = new MCPServer();
mcp.registerTool({
name: 'calculator',
inputSchema: z.object({ expression: z.string() }),
outputSchema: z.string(),
handler: async ({ expression }) => eval(expression).toString(),
});
The core agent class wrapping Mastra for AI orchestration.
new Agent(config) - Create a new agentagent.generate(prompt) - Generate a responseagent.stream(prompt) - Stream a responseSecure code execution via E2B sandboxes.
new SandboxManager(config) - Create a sandbox managermanager.runCode(code, options) - Execute code securelymanager.cleanup() - Clean up resourcesModel Context Protocol server for tool communication.
new MCPServer() - Create an MCP serverserver.registerTool(tool) - Register a toolserver.listTools() - List all toolsserver.callTool(name, input) - Call a toolApache-2.0
FAQs
Core agent primitives, sandbox integration, and MCP server for AgentForge
The npm package @agentforge-ai/core receives a total of 8 weekly downloads. As such, @agentforge-ai/core popularity was classified as not popular.
We found that @agentforge-ai/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.