
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
@byteplus/ark-cli
Advanced tools
BytePlus Ark CLI provides command-line access and Agent Skills for BytePlus Ark. This repository contains the public English Skills distributed with the CLI and the documentation required to use them from supported AI coding agents.
npm install -g @byteplus/ark-cli@latest
To skip Skills downloads and automatic installation for this npm install:
ARKCLI_SKIP_SKILLS=1 npm install -g @byteplus/ark-cli@latest
The same environment variable works across all products and internal/public npm packages. Only the exact value 1 enables it; all other values preserve the default behavior. CLI binary download, verification, installation, and initialization still run. Skills already included in the npm package remain part of that package. The setting is not persisted and does not remove existing Skills; you can still run arkcli +connect manually later. Do not substitute ARKCLI_SKIP_POSTINSTALL=1, which skips the entire hook, including binary downloads.
After installing the CLI, authenticate and install the bundled Skills into the supported local agents:
arkcli auth login
arkcli auth status
arkcli +connect
BytePlus CLI state is stored separately under ~/.arkcli-bp.
The skills/ directory contains one capability-oriented Skill per Ark CLI domain. Each Skill uses the standard SKILL.md and references/ layout and is written in English for BytePlus users.
The public Skill tree is derived from the Ark CLI source repository at a fixed commit. Product support is audited independently for BytePlus; the presence of a Skill documents the command surface and does not override the support status recorded by the product capability audit.
Scan the QR code to join the Ark CLI Lark user group for installation help, troubleshooting, bug reports, and usage discussions.
Do not share API keys, access keys, tokens, or other credentials in the group. For reproducible bugs, please also open a GitHub issue so the fix can be tracked.
Do not disclose security issues through a public GitHub issue or the user group. Report them through the official BytePlus support channel.
The public Skills and documentation are licensed under the Apache License 2.0.
FAQs
BytePlus Ark command-line interface
The npm package @byteplus/ark-cli receives a total of 3,303 weekly downloads. As such, @byteplus/ark-cli popularity was classified as popular.
We found that @byteplus/ark-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 30 open source maintainers collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.