
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
unicode-mcp
Advanced tools
Use this MCP server to Unicode characters, blocks, names, scripts, and properties. Tools include get character, search blocks, search emoji
A practical Unicode reference for agents working with internationalization, text processing, emoji, fonts, and character bugs.
get_character: inspect official UnicodeData fields for a code point.search_blocks: search Unicode block names and ranges.search_emoji: search the official emoji test data by name or annotation.The server reads official Unicode data files and caches them only for the current process. Unicode normalization, rendering, grapheme segmentation, and font support are separate concerns and are not inferred by this server.
npm install
npm run build
node dist/index.js
npm install
npm run build
node dist/index.js
The server uses stdio, so it can be connected to Claude Desktop, Cursor, VS Code, MCP Inspector, or another compatible MCP client.
get_character: Get official UnicodeData metadata for a code point such as U+1F600 or 0041.search_blocks: Search official Unicode block names and ranges.search_emoji: Search the official Unicode emoji test data by annotation or emoji name.This project is intentionally narrow. It should be treated as a practical helper, not a complete certification or security audit. Check the implementation and the returned data before using it with sensitive material. No credentials are required unless the project explicitly says otherwise.
After building, connect the server through your MCP client. The repository root also contains smoke-test.mjs for projects covered by the shared harness. A typical tool call starts with get_character.
These tools need a licence key:
get_character_agecheck_normalizationsearch_named_sequencesThe tool bodies run on our gateway, not inside this package, so the key is what buys access. Buy one at https://buy.polar.sh/polar_cl_mrO7rS5LZxpqM7oAFFEA10i9121J240U40IIj4JRZO4 and set it in your MCP client config:
"env": { "MCP_LICENSE_KEY": "polar_..." }
The gateway checks the key against Polar and gives every key 1,000 free premium calls a month before per-call billing starts. Every other tool on this server stays free.
FAQs
Use this MCP server to Unicode characters, blocks, names, scripts, and properties. Tools include get character, search blocks, search emoji
The npm package unicode-mcp receives a total of 97 weekly downloads. As such, unicode-mcp popularity was classified as not popular.
We found that unicode-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.