Tracks ongoing supply-chain attacks, malicious MCP servers, and prompt-injection campaigns relevant to vibe-coders using Cursor / Claude Code / Lovable / Bolt / v0 / Replit. Advisories, recovery playbooks, prevention guides.
Quick Install
Copy the config for your editor. Some servers may need additional setup — check the README.
Add to claude_desktop_config.json:
{
"mcpServers": {
"vibe-coding-security": {
"command": "uvx",
"args": [
"vibe-coding-security"
]
}
}
}
Run in terminal:
claude mcp add vibe-coding-security uvx vibe-coding-security
Add to .cursor/mcp.json:
{
"mcpServers": {
"vibe-coding-security": {
"command": "uvx",
"args": [
"vibe-coding-security"
]
}
}
}
Or install with pip: pip install vibe-coding-security