
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
appcontext-mcp
Advanced tools
Connect AI coding agents to AppContext — live iOS Simulator and browser screenshots, Metro and console logs, and a personal MCP hub with per-tool policies. Bridges stdio MCP clients to the AppContext desktop app (macOS).
Connect AI coding agents to AppContext from stdio-only MCP clients.
AppContext is a macOS desktop app that gives AI coding agents like Claude Code and Cursor live visual context — iOS Simulator and browser screenshots, console and Metro logs — over MCP, and works as a personal MCP hub with per-tool authorization policies.
http://localhost:7777/sse)Most MCP clients can connect to AppContext's SSE endpoint directly — prefer that when supported:
{ "mcpServers": { "appcontext": { "url": "http://localhost:7777/sse" } } }
For stdio-only clients, use this bridge:
{ "mcpServers": { "appcontext": { "command": "npx", "args": ["-y", "appcontext-mcp"] } } }
fetch_device_status, fetch_liveview, fetch_recent_logs, fetch_web_console,
switch_platform, get_browser_tabs, hub_status, hub_call, hub_policies — plus any tools
from MCP servers you aggregate through the AppContext hub (namespaced server:tool).
MCP Hub features are free; Live View (screenshots/logs) requires AppContext Pro. Docs: https://appcontext.dev/docs/
FAQs
Connect AI coding agents to AppContext — live iOS Simulator and browser screenshots, Metro and console logs, and a personal MCP hub with per-tool policies. Bridges stdio MCP clients to the AppContext desktop app (macOS).
The npm package appcontext-mcp receives a total of 29 weekly downloads. As such, appcontext-mcp popularity was classified as not popular.
We found that appcontext-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.