
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
@nano-step/shared-mcp-proxy
Advanced tools
Shared MCP proxy infrastructure - run MCP servers once, share across tools
Shared MCP proxy infrastructure that runs MCP servers once on the host machine and exposes them via SSE to multiple Docker containers and AI CLI tools. Eliminates memory-wasteful duplication (N containers × M CLIs × K MCPs).
host.docker.internal:9902One command does everything (install + generate configs + start proxy):
npx @nano-step/shared-mcp-proxy
Or use individual commands:
npx @nano-step/shared-mcp-proxy install # Install mcp-proxy + MCP packages
npx @nano-step/shared-mcp-proxy generate # Generate configs for all tools
npx @nano-step/shared-mcp-proxy start # Start mcp-proxy (auto-restarts on crash)
npx @nano-step/shared-mcp-proxy stop # Stop mcp-proxy
npx @nano-step/shared-mcp-proxy status # Check status + per-process memory usage
npx @nano-step/shared-mcp-proxy restart # Restart after config changes
npx @nano-step/shared-mcp-proxy list # List all servers with enabled/disabled status
npx @nano-step/shared-mcp-proxy enable <name> # Enable a server
npx @nano-step/shared-mcp-proxy disable <name> # Disable a server
Debug logging is off by default. Enable it to see all MCP requests flowing through the proxy.
npx @nano-step/shared-mcp-proxy logs --enable # Turn on debug logging
npx @nano-step/shared-mcp-proxy restart # Apply the change
npx @nano-step/shared-mcp-proxy logs # Tail the log (Ctrl+C to stop)
npx @nano-step/shared-mcp-proxy logs --status # Check logging status + log file size
npx @nano-step/shared-mcp-proxy logs --disable # Turn off (warnings only)
npx @nano-step/shared-mcp-proxy logs --clear # Clear the log file
Or run the bash scripts directly:
./install.sh && ./generate.sh && ./start.sh
| Server | Location | Description |
|---|---|---|
| Sequential-Thinking | host | Dynamic problem-solving through chain-of-thought reasoning |
| graphql-tools | host | GraphQL schema inspection and query execution |
| database-inspector | host | Database schema exploration and query tools |
| playwright | container | Browser automation (requires container Chromium) |
| nano-brain | external | Persistent memory and code intelligence (port 3100) |
| linear | host | Linear issue tracking integration |
| amplitude | host | Amplitude analytics integration |
| figma | host | Figma design file inspection |
| Tool | Format | Config File | Top Key |
|---|---|---|---|
| opencode | opencode | config/opencode.mcp.json | mcp |
| amp | amp | config/amp.mcp.json | mcpServers |
| claude | claude | config/claude.mcp.json | mcpServers |
| gemini | gemini | config/gemini.mcp.json | mcpServers |
| codex | codex | config/codex.mcp.toml | mcp_servers |
| qwen | qwen | config/qwen.mcp.json | mcpServers |
| vscode | vscode | config/vscode.mcp.json | servers |
| cline | cline | config/cline.mcp.json | mcpServers |
| roocode | roocode | config/roocode.mcp.json | mcpServers |
| antigravity | antigravity | config/antigravity.mcp.json | mcpServers |
"enabled": true/false to toggle without removing"tools": [...] array to control which tools see itLINEAR_API_KEY, AMPLITUDE_API_KEY, AMPLITUDE_SECRET_KEY, FIGMA_API_KEY on host before starting mcp-proxyservers section in mcp-config.json:
"my-server": {
"command": "my-mcp-server",
"args": [],
"env": {},
"location": "host",
"tools": ["opencode", "amp", "claude"],
"enabled": true
}
install.sh./generate.sh to regenerate all tool configs./stop.sh && ./start.shtools section in mcp-config.json:
"mytool": {
"format": "mytool",
"mcpKey": "mcpServers",
"defaultPath": "config/mytool.mcp.json"
}
generate.sh (copy existing tool block and modify)./generate.sh to create the config fileOverride default config paths with flags:
./generate.sh --opencode-out ~/custom/opencode.json \
--amp-out ~/custom/amp.json \
--claude-out ~/custom/claude.json \
--gemini-out ~/custom/gemini.json \
--codex-out ~/custom/codex.toml \
--qwen-out ~/custom/qwen.json \
--vscode-out ~/custom/vscode.json \
--cline-out ~/custom/cline.json \
--roocode-out ~/custom/roocode.json \
--antigravity-out ~/custom/antigravity.json
FAQs

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.