
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
mcp-server-image-extractor
Advanced tools
MCP server for extracting and categorizing images from web pages with intelligent classification
An MCP (Model Context Protocol) server that extracts and categorizes images from web pages using intelligent heuristics.
Smart Image Extraction: Extracts images from various sources including:
<img> tagsIntelligent Classification: Categorizes images into three types:
Dual Extraction Modes:
Rich Metadata: Returns comprehensive information for each image:
npm install -g mcp-server-image-extractor
# Download and extract the source code
cd image-extractor
npm install
npm run build
Add the server to your MCP settings:
{
"mcpServers": {
"image-extractor": {
"command": "npx",
"args": ["-y", "mcp-server-image-extractor"],
"timeout": 120
}
}
}
Note: The first run with npx may take longer as it downloads the package. Set a higher timeout (120 seconds) to accommodate this.
First install globally:
npm install -g mcp-server-image-extractor
Then configure:
{
"mcpServers": {
"image-extractor": {
"command": "mcp-server-image-extractor"
}
}
}
For development or local testing:
{
"mcpServers": {
"image-extractor": {
"command": "node",
"args": ["C:/path/to/image-extractor/build/index.js"]
}
}
}
To avoid timeout issues, you can pre-cache the package:
npx mcp-server-image-extractor --version
Then use the standard npx configuration.
Once connected, you can use the extract_images tool:
url (required): The URL to extract images fromuseJavaScript (optional): Use Puppeteer for JavaScript-rendered sites (default: false)includeDataUrls (optional): Include base64 data URLs (default: false)minSize (optional): Minimum image size in pixels (default: 0){
"url": "https://example.com",
"useJavaScript": false,
"includeDataUrls": false,
"minSize": 100
}
{
"url": "https://example.com",
"timestamp": "2024-01-07T12:00:00Z",
"images": {
"icons": [
{
"url": "https://example.com/logo.png",
"alt": "Company Logo",
"dimensions": { "width": 150, "height": 50 },
"confidence": 0.95,
"position": "header",
"context": "Main navigation area"
}
],
"products": [
{
"url": "https://example.com/product1.jpg",
"alt": "Product Image",
"dimensions": { "width": 500, "height": 500 },
"confidence": 0.88,
"position": "main",
"context": "Product gallery, near price $29.99"
}
],
"other": [
{
"url": "https://example.com/banner.jpg",
"alt": "Hero Banner",
"dimensions": { "width": 1200, "height": 400 },
"confidence": 0.75,
"position": "main",
"context": "Hero section"
}
]
},
"summary": {
"total": 25,
"icons": 5,
"products": 10,
"other": 10
}
}
The server uses multiple factors to classify images:
image-extractor/
├── src/
│ ├── index.ts # MCP server entry point
│ ├── extractor.ts # Core extraction logic
│ ├── classifier.ts # Image classification
│ ├── utils.ts # Helper functions
│ └── types.ts # TypeScript types
├── build/ # Compiled JavaScript
├── package.json
└── tsconfig.json
npm run build # Compile TypeScript
npm run dev # Watch mode
npm test # Run tests (when implemented)
Contributions are welcome! Please feel free to submit a Pull Request.
MIT
FAQs
MCP server for extracting and categorizing images from web pages with intelligent classification
The npm package mcp-server-image-extractor receives a total of 3 weekly downloads. As such, mcp-server-image-extractor popularity was classified as not popular.
We found that mcp-server-image-extractor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.