
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
USRCP — User Context Protocol. Installs the local CLI + encrypted ledger (usrcp-local): structured, encrypted, cross-platform memory for AI agents.
User Context Protocol — structured, encrypted, cross-platform memory for AI agents.
This is the umbrella package for USRCP. Installing it gives you the usrcp CLI and encrypted local ledger (it depends on usrcp-local).
npm install -g usrcp
usrcp init
usrcp serve
USRCP keeps an encrypted, ledger-style store of your identity, preferences, projects, and interaction timeline, and exposes it to any MCP-compatible agent (Claude Desktop, Cursor, Continue, Cline, …) — so your structured state follows you across tools, with all data encrypted at rest under a key you control.
The base install is the CLI + ledger. To capture activity from other sources, add an adapter:
usrcp setup --adapter=linear # or: github, gmail, slack, discord, telegram, obsidian, …
See the full adapter list and docs.
Apache-2.0
FAQs
USRCP — User Context Protocol. Installs the local CLI + encrypted ledger (usrcp-local): structured, encrypted, cross-platform memory for AI agents.
The npm package usrcp receives a total of 17 weekly downloads. As such, usrcp popularity was classified as not popular.
We found that usrcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.