
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
Fast, free, open-source technical SEO + GEO crawler — CLI and MCP server. By Spronta.
The fast, free, open-source technical SEO + GEO crawler — CLI and MCP server. By Spronta.
npm i -g crawlie
This installs two commands (the right prebuilt binary for your platform is pulled in automatically as an optional dependency — no download script, nothing to unblock):
crawlie — crawl & audit any site from the command linecrawlie-mcp — a Model Context Protocol server so agents can run auditscrawlie crawl https://example.com --format pretty # crawl a whole site
crawlie audit https://example.com/pricing # audit one page
crawlie crawl https://example.com --format html -o report.html
crawlie explain geo-not-answerable # why a finding matters
// claude_desktop_config.json (or any MCP client)
{
"mcpServers": {
"crawlie": { "command": "crawlie-mcp" }
}
}
Tools: crawl_site, audit_url, audit_urls, explain_issue, list_rules, list_reports, get_report.
Supported: macOS (arm64/x64), Linux (x64), Windows (x64). Other platforms: build from source. The desktop app (signed .dmg) is a separate download on Releases.
Full docs & source: https://github.com/spronta/crawlie · by Sean Ryan. MIT.
FAQs
Fast, free, open-source technical SEO + GEO crawler — CLI and MCP server. By Spronta.
The npm package crawlie receives a total of 133 weekly downloads. As such, crawlie popularity was classified as not popular.
We found that crawlie demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.