Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
By Sarah Gooding - Sep 18, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@dbhq/heliograph
Advanced tools
@dbhq/heliograph
Run commands on a machine you cannot SSH into. MCP server and CLI for air-gapped, bastion-only and change-controlled estates.
heliograph
Run commands on a machine you cannot SSH into.
npx -y @dbhq/heliograph mcp # as an MCP server
npx -y @dbhq/heliograph --help # as a CLI
This package downloads the released Go binary for your platform and verifies it against the checksums published beside it. If the checksum does not match, the file is deleted and the install fails.
Full documentation: https://heliograph.dbhq.uk
FAQs
Run commands on a machine you cannot SSH into. MCP server and CLI for air-gapped, bastion-only and change-controlled estates.
We found that @dbhq/heliograph demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 17 Sep 2026
Related posts
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
By Karlo Zanki - Sep 17, 2026
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
By Sarah Gooding - Sep 16, 2026