
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
@0xtiby/toby
Advanced tools
Turn markdown specs into working code with AI-powered plan and build loops
Toby is a CLI tool that turns markdown specifications into working code through AI-driven plan and build loops. You write specs describing what you want, and toby orchestrates an AI agent to plan the implementation, then iteratively builds it — discovering files, generating code, and running validation until the spec is complete.
Toby follows a three-phase loop:
Each phase feeds into the next: specs drive plans, plans drive builds, and build results update the project status so you always know where things stand.
# Install toby globally
npm install -g @0xtiby/toby
# Initialize toby in your project
toby init
# Write a spec in your specs directory (default: specs/)
# e.g. specs/add-auth.md describing the feature you want
# Generate an implementation plan from your spec
toby plan --spec=add-auth
# Build the planned spec with AI
toby build --spec=add-auth
toby init — sets up configuration and specs directory in your projecttoby plan — sends a spec to the AI CLI to produce an implementation plantoby build — iteratively executes the plan, running validation between iterationstoby status — shows progress across all specstoby config — manage CLI, model, and project settings# Install dependencies
pnpm install
# Build the project
pnpm build
# Link globally for local testing
pnpm link --global
# Unlink when done
pnpm unlink --global @0xtiby/toby
MIT
FAQs
AI-assisted development loop engine CLI
The npm package @0xtiby/toby receives a total of 178 weekly downloads. As such, @0xtiby/toby popularity was classified as not popular.
We found that @0xtiby/toby demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.