
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
statelode-bridge
Advanced tools
statelode-bridge lets stdio-first MCP clients talk to StateLode's hosted Streamable HTTP
MCP endpoint.
npx statelode-bridge --token statelode_live_...
Prefer environment variables in checked-in IDE config:
STATELODE_TOKEN=statelode_live_... npx statelode-bridge
The bridge forwards newline-delimited JSON-RPC from stdio to POST /mcp, keeps
the Mcp-Session-Id header in sync, and relays GET /mcp server-sent events
back to stdio as JSON-RPC notifications.
FAQs
stdio to Streamable HTTP MCP bridge for StateLode
We found that statelode-bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.