
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@snowmead/oxcode-mcp
Advanced tools
npm launcher for the oxcode MCP server — PageRank-curated code intelligence for coding agents. Requires the self-updating `oxcode` binary on PATH.
npm launcher for the oxcode MCP server — PageRank-curated code intelligence for coding agents over an indexed repository.
This package is a thin wrapper: it runs oxcode mcp from the oxcode binary,
which you install once and which then self-updates. The package exists so the
server can be listed in the
official MCP Registry; it does
not bundle or download the binary.
oxcode binary# Prebuilt (recommended)
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/oxgraph/oxcode/releases/latest/download/oxcode-cli-installer.sh | sh
# or
cargo binstall oxcode-cli # prebuilt, no compile
cargo install oxcode-cli # from source
(The crate is oxcode-cli; the command is oxcode.)
{
"mcpServers": {
"oxcode": { "command": "npx", "args": ["-y", "@snowmead/oxcode-mcp"] }
}
}
This is equivalent to running oxcode mcp directly — if you already have the
binary, pointing your client at command: "oxcode", args: ["mcp"] is simpler and
avoids the Node hop.
Call the oxcode_watch tool once: it builds the index and keeps it current as
files change. Across many oxcode mcp processes on one folder, a file lock elects
a single writer (the one watcher/re-indexer) while the rest serve reads, and a
standby takes over if the writer exits. See the
oxcode repo for the full CLI and tool list.
FAQs
npm launcher for the oxcode MCP server — PageRank-curated code intelligence for coding agents. Requires the self-updating `oxcode` binary on PATH.
The npm package @snowmead/oxcode-mcp receives a total of 38 weekly downloads. As such, @snowmead/oxcode-mcp popularity was classified as not popular.
We found that @snowmead/oxcode-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.