Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"echarts-for-react": {
"args": [
"-y",
"echarts-for-react"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
The simplest, and the best React wrapper for Apache ECharts. Using visualization with MCP Server mcp-server-chart.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'echarts-for-react' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
Malicious code in echarts-for-react (npm)
Part of the **Mini Shai-Hulud** supply chain attack campaign in which a threat actor compromised the npm account `atool` and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a `preinstall` hook that executes a 498KB obfuscated Bun script, using the GitHub API as a covert exfiltration channel. Credentials are committed to attacker-controlled repositories following Dune-themed naming patterns (e.g., `harkonnen-melange-742`). S
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in analytics / design
MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode
MCP Server for GCP environment for interacting with various Observability APIs.
⚡ A Simple / Speedy / Secure Link Shortener with Analytics, 100% run on Cloudflare.
Official Miro MCP server - Supports context to code and creating diagrams, docs, and data tables.
MCP Security Weekly
Get CVE alerts and security updates for Echarts For React and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.