
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@capsulate/cli
Advanced tools
The Capsulate CLI — launch and drive cloud sandboxes (capsules) from your terminal. Full parity with the dashboard.
Launch and drive isolated cloud sandboxes ("capsules") from your terminal. Full parity with the Capsulate dashboard and API.
npm install -g @capsulate/cli
# Recommended for agents / CI — paste an API key from the dashboard (Settings → API & Keys):
cap login --api-key cap_live_xxx
# Or log in interactively (for team / billing administration):
cap login --email you@example.com
Credentials live in ~/.capsulate/config.json. You can also use env vars
(CAPSULATE_API_KEY, CAPSULATE_BASE_URL, CAPSULATE_TEAM_ID) or global flags
(--api-key, --base-url, --team, --json).
cap launch -t ubuntu-22.04-headless -s 2c4g --wait # launch + wait for ACTIVE
cap ls # list active capsules
cap exec <id> python3 -c "print(42)" # run a command
cap run <id> "print(40+2)" --lang python # run a snippet
cap cp ./app.py <id>:/workspace/app.py # upload a file
cap cp <id>:/workspace/out.txt ./out.txt # download a file
cap env set <id> NODE_ENV=production # set env vars
cap shot <id> -o frame.png # desktop screenshot
cap click <id> 100 200 # computer-use
cap snapshot create <id> -n before-upgrade # snapshot
cap volume create data 10 # 10 GB persistent volume
cap share create <id> teammate@x.com -p interactive # share a capsule
cap capsule destroy <id> # tear down
Add --json to any command for machine-readable output. Run cap <command> --help
for the full option list, or cap docs to open the documentation.
| Area | Commands |
|---|---|
| Auth | login, configure, whoami, logout |
| Capsules | launch, ls, capsule create/list/history/get/destroy/suspend/resume |
| Interaction | exec, run, cp, env set |
| Computer-use | shot, click, move, scroll, drag, type, key |
| Snapshots | snapshot create/list/delete/restore |
| Recordings | record start/stop/status/list/download |
| Volumes | volume create/list/get/delete/attach/detach |
| Sharing | share create/list/revoke, port forward/rm |
| Catalog | catalog, bundles, templates, pricing, availability |
| Account | team list/members, billing balance, apikey list/create/revoke |
FAQs
The Capsulate CLI — launch and drive cloud sandboxes (capsules) from your terminal. Full parity with the dashboard.
The npm package @capsulate/cli receives a total of 7 weekly downloads. As such, @capsulate/cli popularity was classified as not popular.
We found that @capsulate/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.