
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@cleocode/nexus
Advanced tools
CLEO project registry and code intelligence — unified nexus package.
@cleocode/nexus provides tree-sitter powered code analysis and project registry services for the CLEO ecosystem. It enables symbol extraction, structural outlines, codebase search, and single-symbol unfold across multiple languages.
npm install @cleocode/nexus
pnpm add @cleocode/nexus
import { detectLanguage, parseFile, smartSearch } from '@cleocode/nexus';
// Detect language from file extension
const lang = detectLanguage('src/index.ts');
// Parse a file into an AST
const result = await parseFile('src/index.ts');
// Search the codebase
const matches = await smartSearch({ query: 'authentication', dir: './src' });
MIT — see LICENSE
FAQs
CLEO project registry and code intelligence — unified nexus package
The npm package @cleocode/nexus receives a total of 1,026 weekly downloads. As such, @cleocode/nexus popularity was classified as popular.
We found that @cleocode/nexus demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.