
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@imazhar101/mcp-aws-server
Advanced tools
AWS MCP Server - Provides tools for interacting with AWS services (DynamoDB, Lambda, API Gateway)
AWS MCP Server provides Model Context Protocol tools for interacting with AWS services including DynamoDB, Lambda, and API Gateway.
Set the following environment variables:
export AWS_REGION=us-east-1
export AWS_ACCESS_KEY_ID=your-access-key
export AWS_SECRET_ACCESS_KEY=your-secret-key
Or use AWS profiles, IAM roles, or other AWS credential methods.
# Install globally
npm install -g @imazhar101/mcp-aws-server
# Or run directly with npx
npx @imazhar101/mcp-aws-server
# From project root
npm install
npm run build
# The server will be available at:
./dist/servers/aws/src/index.js
To use this server with Cline (VS Code extension), add the following to your Cline MCP settings:
File Location:
~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
%APPDATA%/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
~/.config/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
Configuration:
{
"mcpServers": {
"aws-integration": {
"command": "npx",
"args": ["@imazhar101/mcp-aws-server"],
"env": {
"AWS_REGION": "us-east-1",
"AWS_ACCESS_KEY_ID": "your-access-key-id",
"AWS_SECRET_ACCESS_KEY": "your-secret-access-key"
},
"disabled": false,
"alwaysAllow": [
"dynamodb_list_tables",
"lambda_list_functions",
"apigateway_list_rest_apis"
]
}
}
}
dynamodb_list_tables
- List all DynamoDB tablesdynamodb_describe_table
- Get table schema and detailsdynamodb_put_item
- Insert or replace an itemdynamodb_get_item
- Retrieve an item by keydynamodb_update_item
- Update an existing itemdynamodb_delete_item
- Delete an itemdynamodb_query
- Query items with conditionsdynamodb_scan
- Scan all items in a tablelambda_list_functions
- List all Lambda functionslambda_get_function
- Get function detailslambda_invoke_function
- Invoke a functionlambda_update_function_code
- Update function codelambda_update_function_configuration
- Update function settingsapigateway_list_rest_apis
- List REST APIsapigateway_create_rest_api
- Create a new REST APIapigateway_get_resources
- Get API resourcesapigateway_create_resource
- Create a new resourceapigateway_put_method
- Add a method to a resourceapigateway_put_integration
- Add integration to a methodapigateway_create_deployment
- Deploy the APIapigatewayv2_list_apis
- List HTTP/WebSocket APIsapigatewayv2_create_api
- Create HTTP/WebSocket APIapigatewayv2_get_routes
- Get API routesapigatewayv2_create_route
- Create a new routeThe server requires appropriate AWS IAM permissions for the services you want to use:
dynamodb:ListTables
dynamodb:DescribeTable
dynamodb:PutItem
dynamodb:GetItem
dynamodb:UpdateItem
dynamodb:DeleteItem
dynamodb:Query
dynamodb:Scan
dynamodb:BatchGetItem
dynamodb:BatchWriteItem
lambda:ListFunctions
lambda:GetFunction
lambda:InvokeFunction
lambda:UpdateFunctionCode
lambda:UpdateFunctionConfiguration
apigateway:GET
apigateway:POST
apigateway:PUT
apigateway:DELETE
FAQs
AWS MCP Server - Provides tools for interacting with AWS services (DynamoDB, Lambda, API Gateway)
The npm package @imazhar101/mcp-aws-server receives a total of 87 weekly downloads. As such, @imazhar101/mcp-aws-server popularity was classified as not popular.
We found that @imazhar101/mcp-aws-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.