
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@hung319/opencode-qwen-plugin
Advanced tools
OpenCode plugin for Qwen API - adds provider and 28+ models with custom tools
Plugin cho OpenCode để thêm Qwen AI provider với đầy đủ models.
qwen-validate-token - Validate Qwen tokenqwen-list-models - Liệt kê modelsqwen-setup - Hướng dẫn cài đặtqwen-test - Test kết nối APImkdir -p ~/.config/opencode/plugins
cp -r opencode-qwen-plugin/* ~/.config/opencode/plugins/qwen/
mkdir -p ~/.config/opencode
cp opencode-qwen-plugin/package.json ~/.config/opencode/
Thêm vào opencode.json:
{
"plugin": ["opencode-qwen-plugin"]
}
Truy cập https://chat.qwen.ai và đăng nhập
Mở Developer Console (F12) và chạy:
localStorage.getItem('token')
Hoặc sử dụng bookmarklet:
javascript:(function(){if(window.location.hostname!=="chat.qwen.ai"){alert("🚀 This code is for chat.qwen.ai");window.open("https://chat.qwen.ai","_blank");return;}function getApiKeyData(){const token=localStorage.getItem(!token){alert("token");if("❌ qwen access_token not found !!!");return null;}return token;}async function copyToClipboard(text){try{await navigator.clipboard.writeText(text);return true;}catch(err){console.error("❌ Failed to copy to clipboard:",err);const textarea=document.createElement("textarea");textarea.value=text;textarea.style.position="fixed";textarea.style.opacity="0";document.body.appendChild(textarea);textarea.focus();textarea.select();const success=document.execCommand("copy");document.body.removeChild(textarea);return success;}}const apiKeyData=getApiKeyData();if(!apiKeyData)return;copyToClipboard(apiKeyData).then((success)=>{if(success){alert("🔑 Qwen access_token copied to clipboard !!! 🎉");}else{prompt("🔰 Qwen access_token:",apiKeyData);}});})();
/connect
Tìm "Qwen" và nhập token của bạn.
/models
Chọn model Qwen bạn muốn sử dụng.
# Validate token
qwen-validate-token --token YOUR_TOKEN
# List models
qwen-list-models --apiKey YOUR_API_KEY
# Test connection
qwen-test --apiKey YOUR_API_KEY --message "Hello!"
# Xem hướng dẫn setup
qwen-setup
| Model | Description |
|---|---|
qwen-max | Latest Qwen Max |
qwen2.5-max | Best overall with vision + web search |
qwen2.5-turbo | Fast responses |
qwen2.5-plus | Balanced performance |
qwen2.5-coder-32b | Code generation |
qwen3-next-80b-a3b | Next gen 80B |
qwen3-coder | Code + tool calling |
qwen3-max | Best Qwen3 |
qwq-32b | Reasoning with thinking |
qwen-deep-research | Research + web search |
| `q | Web development |
| wen-web-dev` | qwen-full-stack |
Nếu plugin không tự động thêm provider, thêm vào ~/.config/opencode/opencode.json:
{
"provider": {
"qwen": {
"npm": "@ai-sdk/openai-compatible",
"name": "Qwen AI",
"options": {
"baseURL": "https://qwen.aikit.club/v1",
"headers": {
"Authorization": "Bearer ${QWEN_API_KEY}"
}
},
"models": {
"qwen2.5-max": { "name": "Qwen2.5 Max" },
"qwen2.5-turbo": { "name": "Qwen2.5 Turbo" }
}
}
}
}
MIT
FAQs
OpenCode plugin for Qwen API - adds provider and 28+ models with custom tools
We found that @hung319/opencode-qwen-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.