
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@abdoknbgit/claudex
Advanced tools
Claudex — multi-provider AI coding CLI. Drop-in replacement for Claude Code with OpenAI, Gemini, Groq, DeepSeek, Ollama and more.
Claudex is an open-source, multi-provider AI coding CLI that runs the full Claude Code agentic environment — tools, MCP servers, hooks, skills, the whole thing — with every major LLM provider, natively.
Not a proxy. Not a wrapper around someone else's wrapper. Native adapters, built from scratch, for each provider. When you use Gemini through Claudex, it speaks Gemini's API directly. Same for OpenAI, DeepSeek, OpenRouter, all of them.
You install it once. You type /login. You pick a provider. You work.
That's it. No shell configuration. No export statements. No environment variable archaeology. No "works on my machine" moments. A first-run wizard handles credentials and saves them. Cross-platform — Windows, macOS, Linux. No brainrot config required.
Because Anthropic rate limits are real, and sometimes you just want to say hi to your terminal without getting a 429 back.
Claudex lets you swap providers mid-session. Anthropic giving you the cold shoulder? Switch to Kimi K2.6. Still need the agent loop, the file editing, the bash execution, the MCP servers, the hooks? You have all of it. Nothing changes except who's doing the thinking.
And here's the part that actually matters: you can work with any provider — Codex CLI, Gemini CLI, Antigravity, Cline, Cursor, KiloCode, Kiro, GitHub Copilot — without any of them installed on your machine. Not downloaded, not configured, not even present. Claudex brings the runtime. You bring the auth most of them or API key.
That's the point. Same experience. Different brain. Zero dependencies on the original tool.
npm install -g @abdoknbgit/claudex
Requirements: Node.js >= 20.0.0, Bash
claudex
claudex update
/login — Start herePick a provider, enter your credentials, done. Claudex saves everything so you never do this twice. No env variables. No config files to hunt down.
/providers — See the full pictureShows every connected provider and their current status. Configured, available, needing login — all of it at a glance.
/models — Pick your weaponLive model browser. Fetches the actual catalog from your provider's API in real time. Search, filter, and set any model as your active one.
/models open the full picker
/models <query> search active provider
/models openrouter:kimi search a specific provider
/model kimi-k2-5 set a model directly
/fallback — Recover automaticallyAutomatic recovery when a model fails mid-session. Configure a fallback and never lose your work to a provider outage again.
/usage — Watch the meterTracks usage across every provider you're logged into. Quotas, remaining credit, request counts — see what each one has left before you hit a wall.
https://github.com/user-attachments/assets/ff7d0ec7-fffd-4248-a011-41ed6e9a0eea
| Provider | Notes |
|---|---|
| Anthropic | No comment |
| OpenAI | Best in class, but GPT-5.5 is paywalled behind Plus/Pro |
| Google Gemini | Use your own account — some server configs block certain regions-currently gemini servers are not working and giving some error 429 u can check here https://github.com/google-gemini/gemini-cli/issues |
| Antigravity | Saving lives from agent server overload errors |
| OpenRouter | Would use this full-time if the bills didn't care |
| NVIDIA NIM | Gets slow under server load, especially for newest models like Kimi K2 |
| DeepSeek | Solid |
| Ollama | Local and private, but you knew that already |
| Cline | Moonshot AI's Kimi K2.6 through here is still the big win. Note: the old free tier is no longer fully free, but you still get some free credit |
| GitHub Copilot | For enterprise people. The free models are not coding, they're cosplaying |
| Cursor | Peak performance on Plan mode, but auto mode fails sometimes |
| KiloCode | Good for low-effort sidequest tasks. Cache hit rate is a server-side problem — Claudex fixes it where it can, but you may still pay full price occasionally |
| Kiro | Kiss on the forehead |
Multi-provider, natively Twelve providers with native adapters. Not a routing layer, not a translation proxy — each provider speaks its own API through its own adapter. Full streaming, rate-limit handling, and automatic tool schema sanitization per provider.
The full agent loop File editing, bash execution, glob, grep, web search, web fetch, MCP servers, hooks (PreToolUse, PostToolUse, UserPromptSubmit, Stop, Notification), skills (/commit, /review-pr, /simplify), and task management — all present, all working across every provider.
/surf — Intelligent model routing. Claudex reads the task and routes to the best available model automatically. Experimental, in progress.
/github-me — A tool that handles the full development lifecycle: review, edit, CI/CD, testing, and automation of every GitHub action you'd otherwise do manually.
vscode-claudex — VS Code extension. Provider switching from the command palette, Control Center webview, and project-aware session launch. In progress.
MIT
FAQs
Claudex — multi-provider AI coding CLI. Drop-in replacement for Claude Code with OpenAI, Gemini, Groq, DeepSeek, Ollama and more.
The npm package @abdoknbgit/claudex receives a total of 41 weekly downloads. As such, @abdoknbgit/claudex popularity was classified as not popular.
We found that @abdoknbgit/claudex demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.