
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@bridgenode/mcp
Advanced tools
BridgeNode MCP wrapper — stdio MCP server proxying to remote streamable-HTTP /mcp with automatic x402 payments (Solana USDC). No API keys.
Built for AI agents — no API keys, no registration, pay-as-you-go with Solana USDC via x402.
BridgeNode MCP wrapper — stdio MCP server that proxies requests to the remote
https://bridgenode.cc/mcp (streamable-HTTP) with automatic x402 payment
(Solana USDC). No API keys, no registration.
claude mcp add bridgenode -s user -- npx -y @bridgenode/mcp@latest
Or manually (Claude Code, Cursor, other MCP clients):
{
"mcpServers": {
"bridgenode": {
"command": "npx",
"args": ["-y", "@bridgenode/mcp@latest"]
}
}
}
# Solana wallet private key (base58) — agent's payment wallet
BRIDGENODE_WALLET_KEY=
# Spending policy (fail-closed)
BRIDGENODE_MAX_PER_CALL=0.05
BRIDGENODE_DAILY_CAP=1.0
chat_completions — AI inference (paid; x402 payment automatic)list_models — model list (free)get_price_estimate — estimate cost of a chat request (free)https://bridgenode.cc/mcp (streamable HTTP)tools/call receiving 402 (payment required) — the wrapper automatically
signs the payment with BRIDGENODE_WALLET_KEY and retries the requestPrefer Python? The same BridgeNode toolkit is on PyPI:
pip install bridgenode-llm → https://pypi.org/project/bridgenode-llmpip install bridgenode-cli → https://pypi.org/project/bridgenode-clipip install bridgenode → https://pypi.org/project/bridgenodeFAQs
BridgeNode MCP wrapper — stdio MCP server proxying to remote streamable-HTTP /mcp with automatic x402 payments (Solana USDC). No API keys.
The npm package @bridgenode/mcp receives a total of 515 weekly downloads. As such, @bridgenode/mcp popularity was classified as not popular.
We found that @bridgenode/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.