
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
@withinfocus/statbotics-mcp-server
Advanced tools
A Model Context Protocol (MCP) server that provides access to the Statbotics API for FIRST Robotics Competition statistical data and predictions. Enables AI assistants and other MCP clients to retrieve FRC team EPA ratings, event predictions, and match analytics.
npm install -g @withinfocus/statbotics-mcp-server
Pull the image from GitHub Container Registry:
docker pull ghcr.io/withinfocus/statbotics-mcp-server:latest
Or build locally:
git clone https://github.com/withinfocus/statbotics-mcp-server.git
cd statbotics-mcp-server
docker build -t statbotics-mcp-server .
Add to your MCP client configuration (e.g., Claude Desktop):
{
"mcpServers": {
"statbotics": {
"command": "npx",
"args": ["-y", "@withinfocus/statbotics-mcp-server"]
}
}
}
Add to your MCP client configuration:
{
"mcpServers": {
"statbotics": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"--init",
"ghcr.io/withinfocus/statbotics-mcp-server:latest"
]
}
}
}
Query season-level statistical data.
Tools: get_year, get_years
Access team profiles and EPA ratings.
Tools: get_team, get_teams
Get team statistics for specific seasons.
Tools: get_team_year, get_team_years
Query event details and predictions.
Tools: get_event, get_events
Get team performance at specific events.
Tools: get_team_event, get_team_events
Retrieve match data and predictions.
Tools: get_match, get_matches
Get team-level match statistics.
Tools: get_team_match, get_team_matches
// Get team EPA ratings and statistics
get_team(team: 86)
// Get team's performance in a specific year
get_team_year(team: 86, year: 2024)
// Get event statistics
get_event(event: "2024flor")
// Get all team performances at an event
get_team_events(event: "2024flor")
// Get match predictions and results
get_match(match: "2024flor_qm20")
// Get team's performance in a match
get_team_match(team: 86, match: "2024flor_qm20")
Contributions are welcome! See CONTRIBUTING.md for development setup, testing guidelines, and how to add new tools.
FAQs
Statbotics MCP Server
The npm package @withinfocus/statbotics-mcp-server receives a total of 29 weekly downloads. As such, @withinfocus/statbotics-mcp-server popularity was classified as not popular.
We found that @withinfocus/statbotics-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.