
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Webhook tunnel: expose localhost on a public URL, then inspect, replay and debug every webhook. Downloads the native pipehero binary on install.
Webhook tunnel for developers: expose your localhost on a public URL, then inspect, replay and debug every webhook — solo or with your team.
npm install -g pipehero
pipehero login
pipehero start myapp --port 3000
# → https://myapp.t.pipehero.app forwards to localhost:3000
Point Stripe, GitHub, Shopify or any provider at your public URL and every request shows up live — headers, body, signature ✓/✗ — with one-click replay to localhost. Webhooks that arrive while you're offline are captured and replayable too.
Ships an MCP server so your AI agent (Claude Code, Cursor, …) can read and replay your webhooks:
claude mcp add --transport http pipehero https://mcp.pipehero.app/mcp
This package downloads the prebuilt native binary for your platform (macOS/Linux, x64/arm64) on install. Other install options:
curl -fsSL https://pipehero.app/install | sh
brew install pipehero/tap/pipehero
FAQs
Webhook tunnel: expose localhost on a public URL, then inspect, replay and debug every webhook. Downloads the native pipehero binary on install.
The npm package pipehero receives a total of 6 weekly downloads. As such, pipehero popularity was classified as not popular.
We found that pipehero demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.