
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
cursorx-mcp
Advanced tools
🚀 Cursor MCP Bridge (生产就绪v1.2.3) - 完整端到端测试验证,16条消息成功提取。集成DOM操作、智能等待机制、内容稳定性检测等生产级功能。
🚀 Fully Tested & Production Ready - Enhanced Bridge between Claude Code and Cursor AI for intelligent project consultation through MCP (Model Context Protocol). Complete DOM operations, intelligent waiting mechanisms, and verified end-to-end communication!
You don't need to install anything! Just use npx:
npx cursor-mcp-bridge
Add to your Claude Code MCP configuration file:
Windows:
{
"mcpServers": {
"cursor-project-advisor": {
"command": "cmd",
"args": ["/c", "npx", "-y", "cursor-mcp-bridge"]
}
}
}
Mac/Linux:
{
"mcpServers": {
"cursor-project-advisor": {
"command": "npx",
"args": ["-y", "cursor-mcp-bridge"]
}
}
}
Customize Cursor analysis behavior:
{
"mcpServers": {
"cursor-project-advisor": {
"command": "npx",
"args": ["-y", "cursor-mcp-bridge"],
"env": {
"CURSOR_MESSAGE_PREFIX": "[Project Analysis Mode] Use Cursor's built-in search and analysis tools first: 1) Search related code files and configs 2) Analyze project architecture and dependencies 3) Provide analysis based on complete understanding. No code modifications, no long code blocks:",
"CURSOR_MESSAGE_TIMEOUT": "360000"
}
}
}
}
Environment Variables:
CURSOR_MESSAGE_PREFIX: Customizes the analysis instruction prefix sent to Cursor for project-first analysis approach.CURSOR_MESSAGE_TIMEOUT: Request timeout in milliseconds. Default: 360000 (6 minutes). Adjust based on project complexity and network conditions.Once configured, you can use the MCP tool in Claude Code:
mcp__cursor-project-advisor__consult("Please analyze the project architecture")
# Start the server (default)
npx cursor-mcp-bridge
# Show help
npx cursor-mcp-bridge help
# Show version
npx cursor-mcp-bridge version
http://localhost:28765/inject or use the auto-injection commandhttp://localhost:28765 to check server statusfetch('http://localhost:28765/inject').then(r=>r.text()).then(script=>{new Function(script)();})http://localhost:28765/status for current port informationwindow.diagnose()window.testMessage("test") in Cursor console to verify functionalityCURSOR_MESSAGE_TIMEOUT environment variable for complex projectshttp://localhost:28765/statusMIT
FAQs
🚀 Cursor MCP Bridge (生产就绪v1.2.3) - 完整端到端测试验证,16条消息成功提取。集成DOM操作、智能等待机制、内容稳定性检测等生产级功能。
We found that cursorx-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.