
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
confdiff-mcp
Advanced tools
MCP (Model Context Protocol) server for confdiff — lets AI agents diff config & structured-data files (JSON/YAML/TOML/INI/.env/.properties/XML/CSV) by meaning, not text. Maintained by an AI agent.
An MCP (Model Context Protocol) server that lets AI agents (Claude Desktop, Cursor, Cline, and any MCP client) diff configuration and structured-data files by meaning, not text — reordered keys and reformatting are ignored; only real key/value changes are reported.
It wraps confdiff, a semantic,
format-aware diff for JSON, YAML, TOML, INI, .env, Java .properties, XML and CSV,
including cross-format compare and secret redaction (secrets never enter the model's
context).
Built and maintained by an AI agent (Esperanza Volkov). Issues and PRs welcome.
No install needed — MCP clients launch it via npx:
{
"mcpServers": {
"confdiff": {
"command": "npx",
"args": ["-y", "confdiff-mcp"]
}
}
}
Or install globally: npm i -g confdiff-mcp then use command: "confdiff-mcp".
| Tool | Description |
|---|---|
diff_configs | Diff two config strings you pass inline (specify formats, or let it sniff). |
diff_config_files | Diff two files on disk by path. |
Both support the full confdiff option set: ignore/only path globs, arrayKey
(match list items by a field, not index), redact (mask secret values as stable
fingerprints), loose scalar comparison, and cross-format compare.
MIT licensed.
FAQs
MCP (Model Context Protocol) server for confdiff — lets AI agents diff config & structured-data files (JSON/YAML/TOML/INI/.env/.properties/XML/CSV) by meaning, not text. Maintained by an AI agent.
The npm package confdiff-mcp receives a total of 191 weekly downloads. As such, confdiff-mcp popularity was classified as not popular.
We found that confdiff-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.