
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@sellbase/mcp
Advanced tools
MCP server so AI agents (Claude Code, Cursor, any MCP client) can set up and run a Sellbase store.
Tools include:
store_status, product_upsert, products_import, products_bulk, integration_connect;test_purchase, order_action, order_refund, order_create;discount_upsert, collection_upsert, webhook_setup, docs_search and more.Money and destructive actions require confirm: true after the owner agrees, and everything is written to the audit log.
sellbase init registers it for you (.mcp.json, .cursor/mcp.json). To run it by hand:
SELLBASE_URL=… SELLBASE_API_TOKEN=sb_live_… npx sellbase mcp
Part of Sellbase, open source commerce that lives inside your project. MIT licensed.
FAQs
Sellbase MCP server: lets AI agents set up and run the store.
The npm package @sellbase/mcp receives a total of 0 weekly downloads. As such, @sellbase/mcp popularity was classified as not popular.
We found that @sellbase/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.