
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
@skillkit/mcp-memory
Advanced tools
MCP (Model Context Protocol) server for SkillKit persistent memory. Enables Claude, Cursor, and other MCP-compatible tools to store, search, and recall memories with semantic embeddings.
npm install @skillkit/mcp-memory
# or
pnpm add @skillkit/mcp-memory
Add to your claude_desktop_config.json:
{
"mcpServers": {
"skillkit-memory": {
"command": "npx",
"args": ["@skillkit/mcp-memory"],
"env": {
"SKILLKIT_AGENT_ID": "claude-desktop"
}
}
}
}
Add to your Cursor MCP settings:
{
"mcpServers": {
"skillkit-memory": {
"command": "npx",
"args": ["@skillkit/mcp-memory"],
"env": {
"SKILLKIT_AGENT_ID": "cursor"
}
}
}
}
SKILLKIT_AGENT_ID - Agent identifier for memory isolation (default: mcp-memory-server)SKILLKIT_MEMORY_DB_PATH - Custom database path (default: ~/.skillkit/memory.db)Store a new memory with semantic embedding.
memory_store({
content: "User prefers TypeScript over JavaScript",
category: "preference",
tags: ["language", "coding"]
})
Semantic search through stored memories.
memory_search({
query: "What programming languages does the user prefer?",
limit: 5,
threshold: 0.5
})
Recall memories by category, tier, or tags.
memory_recall({
category: "decision",
tier: "long",
limit: 10
})
Get a specific memory by ID.
memory_get({ id: "memory-uuid" })
Delete a memory.
memory_forget({ id: "memory-uuid" })
Create relationships between memories.
memory_link({
sourceId: "memory-1",
targetId: "memory-2",
relationshipType: "supports",
strength: 0.8
})
Strengthen or weaken a memory. Strong memories get promoted to long-term tier.
memory_reinforce({
id: "memory-uuid",
amount: 0.1 // positive to strengthen, negative to weaken
})
Get memory statistics.
memory_stats({})
fact - Factual informationdecision - Decisions madepreference - User preferencespattern - Observed patternsinsight - Derived insightsreasoning - Reasoning chainswarm - Recent, frequently accessed memorieslong - Consolidated long-term memoriesMemories are automatically promoted from warm to long based on access count, reinforcement score, and age.
The server exposes two resources:
memory://stats - Current memory statistics (JSON)memory://recent - 10 most recent memories (JSON)Apache-2.0
FAQs
MCP (Model Context Protocol) server for SkillKit persistent memory
We found that @skillkit/mcp-memory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.