
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
browser-repl-websocket
Advanced tools
A WebSocket-based browser automation tool with seamless MCP (Model Context Protocol) integration for Claude. Execute JavaScript in browsers remotely with zero configuration.
~/.replmirror-sessionnpx browser-repl-websocket@latest code
This will:
~/.replmirror-sessionCopy the generated JavaScript code and paste it into your browser's developer console.
The MCP server automatically detects your session and connects to the browser. Simply ask Claude to use the browser-repl tool to execute JavaScript!
npx browser-repl-websocket@latest code
npx browser-repl-websocket@latest code --host https://replmirror.247420.xyz
--host option sets remote host (e.g., https://replmirror.247420.xyz)--port option sets custom port (auto-detected from host protocol)npx browser-repl-websocket@latest mcp
npx browser-repl-websocket@latest connect --session <session-id>
Add this to your .mcp.json file:
{
"mcpServers": {
"browser-repl": {
"command": "npx",
"args": ["-y", "browser-repl-websocket@latest", "mcp"]
}
}
}
Or add via CLI:
claude mcp add --scope project browser-repl -- npx -y browser-repl-websocket@latest mcp
// Ask Claude to execute this:
document.title = "Hello from Claude!";
window.location.href
return {
title: document.title,
url: window.location.href,
userAgent: navigator.userAgent
};
document.body.style.backgroundColor = 'lightblue';
document.querySelectorAll('a').forEach(link => console.log(link.href));
~/.replmirror-session--host https://example.com to connect to remote WebSocket serversnpx browser-repl-websocket@latest code --host https://your-server.com
npx browser-repl-websocket@latest code --host https://replmirror.247420.xyz
npx browser-repl-websocket@latest code --host https://your-server.com --port 8080
The remote host configuration is automatically saved and will be used by both the browser connection code and the MCP server.
src/core/websocket.js - WebSocket server with session managementsrc/core/client.js - WebSocket client with role-based connectionssrc/mcp/server.js - MCP browser automation serversrc/mcp/mcp-server.js - MCP protocol implementationsrc/utils/session.js - Session persistence and management# Install dependencies
npm install
# Run locally
npm start
# Run tests
npm test
# Publish new version
npm version patch
npm publish
MIT
FAQs
WebSocket-based browser REPL with CLI and MCP support
We found that browser-repl-websocket demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.