
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@uh-joan/mcp-server-cortellis
Advanced tools
MCP server for Cortellis drug database search and ontology exploration
MCP Server for searching drugs and exploring ontology terms in the Cortellis database.
search_drugs
query
(string) - Raw search querycompany
(string) - Company developing the drugindication
(string) - Active indications (e.g., obesity)action
(string) - Target specific action (e.g., glucagon)phase
(string) - Development status:
phase: "C3"
(short format)phase: "C2 OR C3"
(short format)phase: "Phase 2 Clinical OR Phase 3 Clinical"
(descriptive format)phase: "C2 AND C3"
(using AND operator)phase_terminated
(string) - Last phase before NDR/DX
phase
phase_terminated: "C2 OR CR"
(short format)phase_terminated: "C2"
(short format)phase_terminated: "Phase 2 Clinical"
(descriptive format)phase_terminated: "C2 OR C3"
(multiple phases)technology
(string) - Drug technology (e.g., small molecule)drug_name
(string) - Name of the drugcountry
(string) - Country of developmentoffset
(number) - For paginationexplore_ontology
term
(string) - Generic search termcategory
(string) - Category to search withinaction
(string) - Target specific actionindication
(string) - Disease/conditioncompany
(string) - Company namedrug_name
(string) - Drug nametarget
(string) - Drug targettechnology
(string) - Drug technologyget_drug
id
(string) - Drug Identifierget_drug_swot
id
(string) - Drug Identifierget_drug_financial
id
(string) - Drug Identifierget_company
id
(string) - Company Identifiersearch_companies
query
(string) - Raw search querycompany_name
(string) - Company name to search forhq_country
(string) - Company headquarters countrydeals_count
(string) - Count for all distinct deals where company is principal/partner
indications
(string) - Top 10 indication termsactions
(string) - Top 10 target-based action termstechnologies
(string) - Top 10 technologies termscompany_size
(string) - The size of a company based on market capitalization in billions USD
status
(string) - Highest status of linked drugsoffset
(number) - For paginationWhen running in HTTP mode (USE_HTTP=true), the following REST endpoints are available:
POST /search_drugs
search_drugs
tool inputs)POST /explore_ontology
explore_ontology
tool inputs)GET /drug/:id
id
: Drug identifierGET /drug/:id/swot
id
: Drug identifierGET /drug/:id/financial
id
: Drug identifierGET /company/:id
id
: Company identifierPOST /search_companies
search_companies
tool inputs)The server requires Cortellis API credentials:
CORTELLIS_USERNAME=your_username
CORTELLIS_PASSWORD=your_password
Before starting make sure Node.js is installed on your desktop for npx
to work.
Go to: Settings > Developer > Edit Config
Add the following to your claude_desktop_config.json
:
{
"mcpServers": {
"cortellis": {
"command": "npx",
"args": [
"-y",
"@uh-joan/mcp-server-cortellis"
],
"env": {
"CORTELLIS_USERNAME": "your_username",
"CORTELLIS_PASSWORD": "your_password"
}
}
}
}
npm install
npm run build
For local development, create a .env
file with your credentials:
cp .env.example .env
# Edit .env with your credentials
npm run start
docker build -t mcp-server-cortellis .
docker run -i --env-file .env mcp-server-cortellis
This MCP server is licensed under the MIT License.
Cortellis™ is a commercial product and trademark of Clarivate Analytics. This MCP server requires valid Cortellis API credentials to function. To obtain credentials and learn more about Cortellis, please visit Clarivate's Cortellis page.
This project is not affiliated with, endorsed by, or sponsored by Clarivate Analytics. All product names, logos, and brands are property of their respective owners.
FAQs
MCP server for Cortellis drug database search and ontology exploration
The npm package @uh-joan/mcp-server-cortellis receives a total of 0 weekly downloads. As such, @uh-joan/mcp-server-cortellis popularity was classified as not popular.
We found that @uh-joan/mcp-server-cortellis demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.