
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@elopstudio/ai-wave-mcp
Advanced tools
MCP server for AI Wave — a normalized feed of AI model releases, price changes and deprecations.
MCP server for AI Wave — a normalized feed of AI model releases, price changes, API changes and deprecations, assembled from vendor release notes, Hugging Face, the OpenRouter catalog and GitHub.
Picking a model? Call the OpenRouter catalog directly — it is free and public.
This is for the other question: did anything I depend on change? New releases, price moves, and models being withdrawn, in one feed, deduplicated per model, each marked official or pending review.
Get a key at https://aiwave.elopstudio.com/member, then:
{
"mcpServers": {
"ai-wave": {
"command": "npx",
"args": ["-y", "@elopstudio/ai-wave-mcp"],
"env": { "AIWAVE_API_KEY": "aiw_live_..." }
}
}
}
If your client supports remote MCP, prefer that — no install, always current:
{
"mcpServers": {
"ai-wave": {
"type": "http",
"url": "https://aiwave.elopstudio.com/api/mcp",
"headers": { "Authorization": "Bearer aiw_live_..." }
}
}
}
| Tool | What it answers |
|---|---|
list_model_changes | What changed since I last checked? Poll with since, feed back latest. |
get_model | Price, context and catalog status for one model (OpenRouter or Hugging Face id). |
search_models | Which models fit this budget and context, ordered by current attention? |
Free tier: 1,000 calls/day. Remaining calls come back in x-ratelimit-remaining.
This package is a thin stdio wrapper around the remote endpoint — tool definitions live on the server, so you get new tools without updating it.
FAQs
MCP server for AI Wave — a normalized feed of AI model releases, price changes and deprecations.
We found that @elopstudio/ai-wave-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.