
Research
/Security News
npm Package Uses Prompt Injection and Token Flooding to Disrupt AI Malware Scanners
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.
zfmcptestpublish
Advanced tools
一个使用TypeScript编写的简单MCP(Model Context Protocol)服务器,提供两个工具:计算器和问候工具。
calculate - 执行简单的数学计算
expression (字符串) - 数学表达式,例如:"2 + 2", "10 * 5", "100 / 4"greet - 向用户打招呼
name (字符串) - 要打招呼的用户名language (字符串,可选) - 问候语言,支持:en, zh, es, fr,默认为ennpm install
npm run build
npm start
npm run dev
npm run publish
npm run publish
这会在监视模式下编译TypeScript,当文件更改时自动重新编译。
.
├── src/
│ └── index.ts # 主服务器文件
├── dist/ # 编译后的JavaScript文件
├── package.json # 项目配置和依赖
├── tsconfig.json # TypeScript配置
└── README.md # 项目说明
MIT
FAQs
A simple MCP server written in TypeScript
We found that zfmcptestpublish demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.

Product
Socket now detects supply chain risks in project manifests, starting with missing lockfiles that can make dependency installs non-reproducible.

Research
/Security News
The trojanized extensions use TinyGo-compiled WebAssembly and Solana transaction memos to resolve command-and-control infrastructure.