
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
@fillgate/mcp
Advanced tools
MCP server exposing fee-carrying trading tools (Jupiter Ultra, Polymarket CLOB v2, Hyperliquid) with two-step prepare/execute safety.
MCP server exposing fee-carrying trading tools. Every money-moving tool is two-step
(*_prepare → *_execute) behind guardrails: notional cap, slippage cap, allowlists,
rate limit, dry-run and geoblock.
{ "mcpServers": { "fillgate": { "command": "npx", "args": ["-y", "@fillgate/mcp"],
"env": { "DRY_RUN": "true" } } } }
Fees. Jupiter Ultra swaps carry a 50 bps referral fee (Jupiter's Ultra minimum) that
routes to Fillgate's own referral account by default. Set JUP_REFERRAL_ACCOUNT to route
it to your own account instead — fillgate_status always reports which one is active.
A venue's tools are registered only when its whole write path is configured, so a
half-configured venue is invisible to the agent instead of failing at execute time.
Out of the box that means Jupiter Ultra (live on Solana mainnet); Polymarket CLOB v2
and Hyperliquid perps ship in the package and turn on once configured. Call
fillgate_status first — it reports enabled and a howToEnable for everything else.
Full docs, guardrail table and setup: https://github.com/mineloop99/fillgate
MIT
FAQs
MCP server exposing fee-carrying trading tools (Jupiter Ultra, Polymarket CLOB v2, Hyperliquid) with two-step prepare/execute safety.
We found that @fillgate/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.