
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@cafitac/agent-memory
Advanced tools
Local-first memory for AI agents.
agent-memory gives CLI agents a small SQLite-backed memory layer for storing approved facts, procedures, and other durable context locally. The default setup keeps your memory database on your machine at ~/.agent-memory/memory.db.
Recommended npm install:
npm install -g @cafitac/agent-memory
Initialize the local database and check that the CLI works:
agent-memory bootstrap
agent-memory doctor
That is enough for the default local setup.
If you do not want to install globally, run the CLI through npm:
npm exec --yes --package @cafitac/agent-memory -- agent-memory doctor
DB=~/.agent-memory/memory.db
agent-memory init "$DB"
agent-memory create-fact "$DB" "agent-memory" "install" "npm install -g @cafitac/agent-memory" "user:default"
agent-memory approve-fact "$DB" 1
agent-memory retrieve "$DB" "How do I install agent-memory?" --preferred-scope user:default
Normal retrieval uses approved memories by default. Candidate or disputed memories stay out of normal prompt context unless you explicitly review or request them.
For Hermes users, bootstrap creates or updates the local Hermes hook config so Hermes can retrieve bounded memory context before model calls:
agent-memory bootstrap
hermes hooks doctor
Existing Hermes hooks are preserved when possible.
By default, agent-memory stores data in your local SQLite database. It is not a hosted service and does not upload your memory database for you.
Be careful when sharing:
~/.agent-memory/memory.dbFAQs
Local-first graph memory CLI for AI agents
The npm package @cafitac/agent-memory receives a total of 4 weekly downloads. As such, @cafitac/agent-memory popularity was classified as not popular.
We found that @cafitac/agent-memory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.