
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
@code-insights/cli
Advanced tools
Command-line tool that parses Claude Code session history and syncs it to your own Firebase Firestore.
Full documentation: docs.code-insights.app
npm install -g @code-insights/cli
Verify it works:
code-insights --version
code-insights initConfigure Code Insights with your Firebase credentials.
# Quick setup — import directly from files (recommended)
code-insights init \
--from-json ~/Downloads/serviceAccountKey.json \
--web-config ~/Downloads/firebase-web-config.js
# Interactive setup — prompts for each value
code-insights init
Flags:
--from-json <path> — Path to the Firebase service account key (downloaded from Firebase Console > Project Settings > Service Accounts)--web-config <path> — Path to the Firebase web SDK config (saved from Firebase Console > Project Settings > General > Your Apps). Accepts both JSON and the JavaScript snippet from Firebase.You can use one flag, both, or neither. Any values not provided via flags will be collected interactively.
Configuration is stored in ~/.code-insights/config.json. Web config is stored separately in ~/.code-insights/web-config.json.
code-insights connectGenerate a URL to connect the web dashboard to your Firebase.
code-insights connect
The URL includes your Firebase web config base64-encoded as a query parameter. Open it in a browser to connect the dashboard to your Firestore — no manual configuration needed.
code-insights syncSync Claude Code sessions to Firestore.
# Sync new/modified sessions
code-insights sync
# Force re-sync all sessions
code-insights sync --force
# Preview what would be synced
code-insights sync --dry-run
# Sync specific project only
code-insights sync --project "my-project"
# Quiet mode (for hooks)
code-insights sync --quiet
# Regenerate titles for all sessions
code-insights sync --regenerate-titles
code-insights statusShow sync status and statistics.
code-insights status
Displays:
code-insights resetDelete all data from Firestore and reset local sync state.
# Interactive (asks for confirmation)
code-insights reset
# Skip confirmation
code-insights reset --confirm
code-insights install-hookInstall a Claude Code hook for automatic sync after each session.
code-insights install-hook
code-insights uninstall-hookRemove the automatic sync hook.
code-insights uninstall-hook
The CLI reads JSONL files from ~/.claude/projects/ which contain:
Each session is parsed to extract:
Sync state is tracked in ~/.code-insights/sync-state.json:
--force to bypass and re-sync everythingProject IDs are generated from git remote URLs when available:
Sessions are automatically titled based on:
See CONTRIBUTING.md for development setup, code style, and PR guidelines.
MIT License — see LICENSE for details.
FAQs
Turn your AI coding sessions into knowledge
The npm package @code-insights/cli receives a total of 513 weekly downloads. As such, @code-insights/cli popularity was classified as not popular.
We found that @code-insights/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.