
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@rymovac/mcp
Advanced tools
MCP server that makes LLMs write poetry that actually rhymes. This Model Context Protocol server provides tools for Czech rhymes using the rymovac.cz API.
Add this server to your Claude Desktop/Cursor configuration:
{
"mcpServers": {
"rymovac": {
"command": "npx",
"args": ["-y", "@rymovac/mcp"]
}
}
}
The server provides:
find_rhymes
Find Czech rhymes for a given word or phrase.
Parameters:
word
(required): The word or phrase to find rhymes forcount
(optional): Number of rhymes to return (1-50, default: 10)from
(optional): Starting index for pagination (default: 0)check_rhyme
Check if two Czech words, phrases, verses, or poem rows rhyme.
Parameters:
word1
(required): The first Czech word, phrase, verse, or poem row to compareword2
(required): The second Czech word, phrase, verse, or poem row to compareczech-poem-guide
(experimental)A comprehensive guide for writing Czech poems using the rhyme finder.
Parameters:
theme
(optional): Theme or topic for the poemverses
(optional): Number of verses/stanzas (default: 4)npm install
npm run build
npm run start
npm run build
- Build TypeScript to JavaScriptnpm start
- Start the production servernpm run inspect
- Start and testing with MCP Inspectornpm run watch
- Watch mode for TypeScript compilation onlyAdd this to configuration:
{
"mcpServers": {
"rymovac": {
"command": "node",
"args": ["/path/to/rymovac-mcp/dist/index.js"]
}
}
}
You can test the MCP server using the official MCP Inspector (https://modelcontextprotocol.io/legacy/tools/inspector):
npm run inspect
npm publish
This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
MCP server for finding Czech rhymes using rymovac.cz API
The npm package @rymovac/mcp receives a total of 15 weekly downloads. As such, @rymovac/mcp popularity was classified as not popular.
We found that @rymovac/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.