
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@browserbasehq/mcp-browserbase
Advanced tools

Run npm install to install the necessary dependencies, then run npm run build to get dist/index.js.
Set up your Claude Desktop configuration to use the server.
{
"mcpServers": {
"browserbase": {
"command": "node",
"args": ["path/to/mcp-server-browserbase/browserbase/dist/index.js"],
"env": {
"BROWSERBASE_API_KEY": "<YOUR_BROWSERBASE_API_KEY>",
"BROWSERBASE_PROJECT_ID": "<YOUR_BROWSERBASE_PROJECT_ID>"
}
}
}
}
Restart your Claude Desktop app and you should see the tools available clicking the 🔨 icon.
Start using the tools! Below is an image of Claude closing a browser session.
browserbase_create_session
browserbase_navigate
url (string)browserbase_screenshot
name (string, required): Name for the screenshotselector (string, optional): CSS selector for element to screenshotwidth (number, optional, default: 800): Screenshot widthheight (number, optional, default: 600): Screenshot heightbrowserbase_click
selector (string): CSS selector for element to clickbrowserbase_fill
selector (string): CSS selector for input fieldvalue (string): Value to fillbrowserbase_evaluate
script (string): JavaScript code to executebrowserbase_get_content
selector (string, optional): CSS selector to get content from specific elementsbrowserbase_parallel_sessions
sessions (array): Array of objects containing:
url (string): URL to navigate toid (string): Session identifierThe server provides access to two types of resources:
Console Logs (console://logs)
Screenshots (screenshot://<name>)
This MCP server is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.
FAQs
MCP server for browser automation using browserbase
We found that @browserbasehq/mcp-browserbase demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.