
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
swagger-api
Advanced tools
A Model Context Protocol (MCP) server that extracts API definitions from Swagger/OpenAPI JSON endpoints. This tool provides structured access to API paths and schemas from various internal HP services.
pip install swagger-api-mcp
Start the server:
python -m swagger_api.swagger_api
base_url_listLists available Swagger API endpoints with descriptions.
Returns:
get_swagger_api_defs_from_jsonExtracts API definitions from a Swagger JSON endpoint.
Parameters:
swagger_json_url: URL to the swagger.json endpointbase_url: Base URL for the API serviceReturns:
from swagger_api.swagger_api import mcp
# Get list of available APIs
apis = base_url_list()
# Extract API definitions
api_defs = await get_swagger_api_defs_from_json(
swagger_json_url="https://example.com/api-docs/swagger.json",
base_url="https://example.com"
)
The server provides access to the following internal HP APIs:
https://mscc-svc.api.dev-thor-ue1.hpip-internal.com/svc/dcc-notifications/api-docs/swagger.jsonhttps://dss-svc.api.dev-thor-ue1.hpip-internal.com/svc/device-view/api-docs/swagger.jsonhttps://hpcorp-ob-test.default.api.hp.com/device-view-service-dev/svc/supply-order/api-docs/swagger.jsongit clone <repository-url>
cd swagger_api
pip install -r requirements.txt
python swagger_api/swagger_api.py
swagger_api/
├── __init__.py
├── swagger_api.py # Main MCP server implementation
├── README.md # This file
└── requirements.txt # Python dependencies
The server includes comprehensive error handling:
verify=False) for internal corporate APIsThis project is licensed under the MIT License - see the LICENSE file for details.
For support and questions, please contact the development team or create an issue in the repository.
FAQs
A tool to fetch and parse Swagger API definitions from a given URL.
We found that swagger-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.