
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@paretools/shared
Advanced tools
Shared utilities for Pare MCP servers.
run(command, args, options) — Executes a CLI command via execFile (no shell injection) and returns { stdout, stderr, exitCode }dualOutput(data, formatter) — Returns both structuredContent (typed JSON) and content (human-readable text) for MCP tool responsesstripAnsi(text) — Removes ANSI escape codes from CLI outputThis package is used internally by all @paretools/* server packages. You generally don't need to install it directly unless you're building a custom Pare server.
import { run, dualOutput, stripAnsi } from "@paretools/shared";
FAQs

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.