
Research
/Security News
npm Package Uses Prompt Injection and Token Flooding to Disrupt AI Malware Scanners
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.
@fre4x/jupyter
Advanced tools
Jupyter Notebook MCP server for reading, writing, executing code in .ipynb files, and launching a local Jupyter UI.
.ipynb (JSON) manipulation.MOCK=true.jupyter_get_notebook: Read a Jupyter notebook (.ipynb) file.jupyter_create_notebook: Create a new empty Jupyter notebook.jupyter_add_cell: Add a new cell (code/markdown) to a notebook.jupyter_update_cell: Update the content of an existing cell.jupyter_execute_code: Execute code in a real Jupyter kernel.jupyter_list_kernels: List all active Jupyter kernels.jupyter_open_notebook: Open a notebook in the default browser or viewer.MOCK=true npx @fre4x/jupyter
{
"mcpServers": {
"jupyter": {
"command": "npx",
"args": ["-y", "@fre4x/jupyter"],
"env": {
"JUPYTER_ROOT_DIR": "/absolute/path/to/notebooks",
"JUPYTER_AUTO_OPEN": "true",
"JUPYTER_START_NOTEBOOK_PATH": "/absolute/path/to/notebooks/demo.ipynb"
}
}
}
}
JUPYTER_SERVER_URL pointing at an existing server.xdg-open / open / Windows shell integration for browser launch.MOCK=true keeps the old fixture-only behavior.MOCK=true, the server first tries JUPYTER_SERVER_URL if provided.jupyter lab, then multiple jupyter notebook / jupyter-notebook compatibility fallbacks for Notebook 7 and Notebook 6) with --no-browser when a runtime-backed tool is called.jupyter, jupyter-lab, jupyter-notebook, or desktop openers are missing, the tool response explains what is missing and tells the caller to install it directly or ask the user to install/configure it.JUPYTER_AUTO_OPEN and JUPYTER_START_NOTEBOOK_PATH are still honored, but only when the first runtime-backed tool initializes Jupyter.jupyter_open_notebook opens the Jupyter UI in your default browser and starts the runtime on demand if needed.JUPYTER_SERVER_URL: Use an already-running Jupyter server instead of launching one.JUPYTER_TOKEN: Optional token for an external Jupyter server.JUPYTER_ROOT_DIR: Root directory for managed Jupyter startup. Defaults to the current working directory.JUPYTER_AUTO_OPEN: Set to false to skip browser launch when the first runtime-backed tool initializes Jupyter.JUPYTER_START_NOTEBOOK_PATH: Notebook to open automatically when the first runtime-backed tool initializes Jupyter.JUPYTER_KERNEL_NAME: Kernel name used when code execution needs to create a kernel. Defaults to python3.FAQs
Jupyter Notebook MCP server
We found that @fre4x/jupyter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.

Product
Socket now detects supply chain risks in project manifests, starting with missing lockfiles that can make dependency installs non-reproducible.

Research
/Security News
The trojanized extensions use TinyGo-compiled WebAssembly and Solana transaction memos to resolve command-and-control infrastructure.