
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
@howaboua/opencode-background-process
Advanced tools
OpenCode plugin for managing background processes - launch, monitor, and control long-running tasks
An OpenCode plugin for managing background processes. Launch, monitor, and control long-running tasks like dev servers, watchers, and build processes.
Add to your opencode.json:
{
"plugin": ["opencode-background-process"]
}
OpenCode automatically installs plugin dependencies at runtime.
This plugin ships a bundled skill at skills/background-process/SKILL.md that provides housekeeping guidance for long-running processes and how to differentiate it from standard system processes. The plugin registers the skill automatically.
background_process_launchStart a command as a background process. Use for long-running tasks instead of blocking shell runs.
| Argument | Type | Required | Description |
|---|---|---|---|
command | string | yes | The shell command to run |
cwd | string | no | Working directory (defaults to current) |
id | string | no | Custom ID (auto-generated if not provided) |
maxOutputLines | number | no | Output buffer size (default: 500) |
background_process_listList background processes started by this tool in the current session (not system processes).
background_process_readRead captured output from a background process started by this tool.
| Argument | Type | Required | Description |
|---|---|---|---|
id | string | yes | Process ID to read from |
lines | number | no | Number of lines to return (default: 50) |
clear | boolean | no | Clear buffer after reading (default: false) |
background_process_writeSend input to a running process started by this tool.
| Argument | Type | Required | Description |
|---|---|---|---|
id | string | yes | Process ID |
input | string | yes | Input to send |
newline | boolean | no | Append newline (default: true) |
background_process_killKill a background process started by this tool.
| Argument | Type | Required | Description |
|---|---|---|---|
id | string | yes | Process ID to kill |
signal | enum | no | SIGTERM, SIGKILL, or SIGINT (default: SIGTERM) |
remove | boolean | no | Remove from tracking after killing (default: false) |
background_process_cleanupRemove exited processes or kill all tracked processes.
| Argument | Type | Required | Description |
|---|---|---|---|
killAll | boolean | no | Kill all running processes (default: false, only removes exited) |
Start a dev server with 'bun run dev' in the background
List all background processes
Read the last 100 lines from process 'bun-1'
Send 'q' to process 'bun-1' to quit
Kill process 'bun-1'
bun-1, npm-2)MIT
FAQs
OpenCode plugin for managing background processes - launch, monitor, and control long-running tasks
We found that @howaboua/opencode-background-process demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.