
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@tiwater/office-mcp
Advanced tools
Published MCP distribution for independent Tiwater Office, PDF, and Text document capabilities
Published, Agent-facing stdio MCP server for PDF inspection, table extraction, and OCR. It is a separate executable, process, and tool surface from the Office MCP, distributed in the same npm package so both use one trusted release path.
pdf_inspectpdf_extract_tablespdf_find_tablepdf_extract_table_detailspdf_ocr (pinned Aliyun qwen3.8-max; per-invocation Supen credential)Every tool is read-only and records the exact input PDF identity. Read results
can be retained in immutable JSON artifacts. pdf_inspect always requires that
durable artifact and separately returns a bounded document identity without
traversing page content.
npm install --global @tiwater/office-mcp
tiwater-pdf-mcp
The server invokes the independently published tiwater-pdf executable from
PATH. It does not fall back to a repository checkout. OCR credentials are
provided to that child for one invocation by the runtime environment; the MCP
does not read or persist provider credentials.
FAQs
Published MCP distribution for independent Tiwater Office, PDF, and Text document capabilities
We found that @tiwater/office-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.