
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
JoyBuzz是一个Model Context Protocol (MCP) 服务器,提供三个有趣的API:
joybuzz/
├── dist/ # 编译后的JavaScript文件
├── src/ # 源代码
│ ├── index.ts # 主入口文件
│ └── services/ # API服务实现
│ ├── catImageApi.ts
│ ├── jokeApi.ts
│ └── quoteApi.ts
├── package.json # 项目配置
└── tsconfig.json # TypeScript配置
npm install
npm run build
# 使用标准输入/输出流方式(适用于本地与Claude Desktop、Cursor等集成)
npm start
# 使用HTTP服务器方式(适用于云服务部署)
npm run start:http
当使用HTTP服务器模式时,可以通过以下环境变量配置服务器:
PORT: 服务器监听端口(默认为3000)USE_HTTP: 设置为"true"启用HTTP服务器模式示例:
PORT=8080 USE_HTTP=true npm start
get-cat-image)获取随机猫猫图片URL。
参数:
tag: (可选) 猫猫图片标签,例如:cute, funny等get-joke)获取随机笑话。
参数:
category: (可选) 笑话类别,可选值:any, programming, misc, dark, pun, spooky, christmasget-quote)获取随机名人名言。
参数:
category: (可选) 名言类别,例如:inspirational, happiness等打开Claude Desktop配置文件:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json添加JoyBuzz服务器配置:
{
"mcpServers": {
"joybuzz": {
"command": "node",
"args": ["/ABSOLUTE/PATH/TO/JOYBUZZ/dist/index.js"]
}
}
}
node /ABSOLUTE/PATH/TO/JOYBUZZ/dist/index.js
如果要部署到云服务(如阿里云百炼平台),请使用HTTP模式:
通过npm发布包:
npm publish
在云服务配置中,选择npx方式部署,并指定:
joybuzz--http(以启用HTTP服务器模式)MIT
FAQs
MCP Server with cat images, jokes and quotes APIs
The npm package joybuzz receives a total of 8 weekly downloads. As such, joybuzz popularity was classified as not popular.
We found that joybuzz demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.