Node Runtime

mcp-protocol/node-runtime

This is a security research demonstration package maintained by JFrog Security, not a production tool. It simulates supply-chain security scenarios in AI environments to help researchers understand potential vulnerabilities in the MCP ecosystem. If you're evaluating MCP security posture or studying attack vectors in AI tool chains, this provides a controlled example of how malicious packages might behave. The repository explicitly warns against production use. It's purely educational, designed to raise awareness about supply-chain risks rather than solve actual integration problems. Look elsewhere if you need a working Node.js runtime for MCP.

GitHub stars

1

last updated

Feb 25, 2026

Sponsors

SnugThe clipboard manager you and your agent can use, safelyAgent CaffeineClose your lid, come back to finished workWaxBlock anything with supervision, without erasing your iPhoneOpen StepsSponsoredFree and open-source skills that make AI coding agents easier to understand, verify, and control.