
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@infrawise/mcp-server
Advanced tools
Claude Code MCP server for Infrawise Azure FinOps recommendations.
Tools exposed to Claude Code:
get_idle_resourcesget_sku_optimizationsget_general_recommendationsget_savings_summaryAll tools support optional subscription_filter (subscription UUID).
# 1) Authenticate + register + validate in one command
npx @infrawise/mcp-server setup
# 2) Restart Claude Code
Note: Use
claude mcp add— do not manually addmcpServersto~/.claude/settings.json, that key is not valid there.
# Authenticate only (supports --tenant)
npx @infrawise/mcp-server auth
npx @infrawise/mcp-server auth --tenant <tenantId>
# Setup with explicit tenant
npx @infrawise/mcp-server setup --tenant <tenantId>
# Diagnose auth and onboarding readiness with fix steps
npx @infrawise/mcp-server doctor
cd packages/claude-mcp
npm install
npm run build
node dist/index.js auth
cd packages/claude-mcp
npm publish --access public
Notes:
prepublishOnly automatically runs npm run clean && npm run buildnpm view @infrawise/mcp-server versionINFRAWISE_API_BASE (default: https://api.infrawiseai.com/api)INFRAWISE_AZURE_CLIENT_ID (default: Infrawise API app ID)INFRAWISE_AZURE_API_SCOPE (default: api://<clientId>/delegated_access)INFRAWISE_AZURE_AUTHORITY (default: https://login.microsoftonline.com/common)INFRAWISE_AZURE_TENANT_ID (optional: your Azure AD tenant ID; when set, authority is built automatically)~/.infrawise/mcp-credentials.json0600 mode (best effort on Windows)FAQs
Infrawise MCP server for Claude Code
The npm package @infrawise/mcp-server receives a total of 25 weekly downloads. As such, @infrawise/mcp-server popularity was classified as not popular.
We found that @infrawise/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.