
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
Fetch markdown snapshots of web pages using Cloudflare's Markdown for Agents feature, so coding agents can consume clean structured content instead of HTML.
This repo also includes an AI-consumable skills catalog in skills/, following the agentskills format.
skills/README.mdskills/mdrip/SKILL.mdIf you use a Skills-compatible agent setup, you can add these skills directly:
# install skills from this repo
npx skills add charl-kruger/mdrip
For agent workflows, markdown is often better than HTML:
mdrip requests pages with Accept: text/markdown, stores the markdown locally, and tracks fetched pages in an index.
If a site does not return text/markdown, mdrip can automatically fall back to converting text/html into markdown.
The fallback uses an in-project converter optimized for common documentation/blog content (headings, links, lists, code blocks, tables, blockquotes).
Cloudflare's blog and docs describe Markdown for Agents as content negotiation at the edge:
Accept: text/markdownx-markdown-tokens for token-size awarenessFor AI workflows this is high-value:
References:
npm install -g mdrip
Or use with npx:
npx mdrip <url>
# Fetch one page
mdrip https://developers.cloudflare.com/fundamentals/reference/markdown-for-agents/
# Fetch multiple pages
mdrip https://blog.cloudflare.com/markdown-for-agents/ https://developers.cloudflare.com/
# Optional timeout override (ms)
mdrip https://example.com --timeout 45000
# Disable HTML fallback (strict Cloudflare markdown only)
mdrip https://example.com --no-html-fallback
mdrip list
mdrip list --json
mdrip remove https://developers.cloudflare.com/fundamentals/reference/markdown-for-agents/
# Remove all
mdrip clean
# Remove only one domain
mdrip clean --domain developers.cloudflare.com
On first run, mdrip can optionally update:
.gitignore (adds mdrip/)tsconfig.json (excludes mdrip)AGENTS.md (adds a section pointing agents to snapshots)Choice is stored in mdrip/settings.json.
Use flags to skip prompt:
# allow updates
mdrip https://example.com --modify
# deny updates
mdrip https://example.com --modify=false
mdrip/
├── settings.json
├── sources.json
└── pages/
└── developers.cloudflare.com/
└── fundamentals/
└── reference/
└── markdown-for-agents/
└── index.md
Accept: text/markdown (Cloudflare Markdown for Agents enabled).text/markdown, mdrip can convert text/html into markdown fallback unless --no-html-fallback is used.# optional package check
pnpm publish:dry-run
# publish to npm
pnpm publish:npm
prepublishOnly runs automatically before publish and executes:
pnpm type-checkpnpm testpnpm buildCharl Kruger
Apache-2.0
FAQs
Fetch markdown snapshots of web pages using Cloudflare Markdown for Agents
The npm package mdrip receives a total of 25 weekly downloads. As such, mdrip popularity was classified as not popular.
We found that mdrip demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.