
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
@mcpolyglot/config
Advanced tools
Config schema and loader for mcpolyglot. Validates user config and resolves secrets via env / file / OS keychain refs.
Config schema and loader for mcpolyglot. Validates user config with Zod and resolves secrets from env / file / OS keychain refs.
import { defineConfig } from '@mcpolyglot/config';
export default defineConfig({
server: { name: 'mcpolyglot', version: '0.0.1' },
transport: { kind: 'stdio' },
sources: [
{
id: 'pg.main',
kind: 'postgres',
url: '${env:DATABASE_URL}',
scopes: ['schema:read', 'tables:read', 'query:raw'],
perEntityTools: { enabled: false },
limits: { rowCap: 200, timeoutMs: 10_000, maxBytes: 262144 },
redact: { columns: ['public.users.password_hash'], patterns: [] },
},
],
});
Both .ts and .yaml configs are supported.
Literal credentials are rejected. You must use one of:
${env:NAME} — process environment.${file:./path} — file on disk (good for Docker secrets / mounted files).${keychain:item} — OS keychain via the optional keytar dep.src/schema.tsMIT licensed.
FAQs
Config schema and loader for mcpolyglot. Validates user config and resolves secrets via env / file / OS keychain refs.
The npm package @mcpolyglot/config receives a total of 0 weekly downloads. As such, @mcpolyglot/config popularity was classified as not popular.
We found that @mcpolyglot/config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.