ai

Malware Announcements Engineering Security AI Open Source Technology SCA Compliance & SBOM CI/CD

The State of MCP Registries

Explore the architecture of the Model Context Protocol (MCP) and the state of its official registry. Learn how to consume server packages programmatically and discover the underlying challenges of...

Introducing SafeDep Model Context Protocol (MCP) Server to Secure AI Generated Code

Introducing SafeDep Model Context Protocol (MCP) Server, a new feature in SafeDep vet to secure AI generated code and protect against slopsquatting attacks, vulnerable and malicious packages.

Malicious Open Source Library Analysis: llm-oracle and its Payload

Malware hidden in open source library packages are real. In this article, we analyse the malicious npm package llm-oracle.

Secure Vibe Coding with AI Agents

AI coding agents make development faster but can inadvertently introduce security risks by suggesting unvetted packages. Learn how to use vet MCP server for adding security to your vibe coding...

Agentic Workflows for Malicious Package Analysis

Experiments with agentic workflows for malicious package analysis built using Claude Desktop, Model Context Protocol (MCP) server, static code analysis and SafeDep Cloud API tools.