
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
unmarking-mcp
Advanced tools
Local MCP server that removes C2PA content credentials from AI-generated images, video and audio.
Local MCP server that removes the C2PA content credential from AI-generated images, video and audio on your machine. It runs the same engine as unmark.ing, c2pa-rs compiled to WebAssembly, so files never leave your computer.
Claude Code:
claude mcp add unmarking -- npx -y unmarking-mcp
Any other client that supports stdio servers:
{
"mcpServers": {
"unmarking": { "command": "npx", "args": ["-y", "unmarking-mcp"] }
}
}
Requires Node 20 or newer.
inspect_file({ path | url }) reports the content credential embedded in a file, including whether it was made with Claude.strip_file({ path | url, output? }) removes it and writes the cleaned copy next to the original with a -clean suffix, or to output. Files without a credential are left alone.Supported formats: JPG, PNG, WebP, GIF, SVG, TIFF, DNG, HEIC, AVIF, JXL, MP4, MOV, AVI, MP3, WAV, FLAC and M4A.
For files that are only reachable by URL there is also a hosted server at https://api.unmark.ing/mcp. See unmark.ing/developers.
FAQs
Local MCP server that removes C2PA content credentials from AI-generated images, video and audio.
The npm package unmarking-mcp receives a total of 35 weekly downloads. As such, unmarking-mcp popularity was classified as not popular.
We found that unmarking-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.