
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
@jumbo-ctx/cli
Advanced tools
AI memory like an elephant
Augmented context engineering across agents and IDEs
Quick Start • Installation • Usage • FAQ
Coding agents forget everything between sessions. Context is lost, decisions are forgotten, instructions are repeated, and you never build on what you've done before. You waste tokens re-explaining the same things—or worse, hours curating .md files trying to keep the agent producing the same code you would (in 1/10th the time). Switch models or IDEs, and you're back to square one. The joy of building software is lost to the frustration of cleaning up after a messy intern.
Jumbo gives your AI agents persistent memory. It captures all the information about your project necessary to keep agents implementing to the standard you define—then surfaces the right information at the right time—trim & concise. Your agents 'remember' what matters.
# Install globally
npm install -g @jumbo/cli
# Initialize in your project
jumbo project init
That's it. Fire up your coding agent. Work flows. Memories stick. Momentum builds.
Requirements: Node.js >= 18.18.0
npm install -g @jumbo/cli
Verify installation:
jumbo
Run jumbo project init in your project root. This creates a .jumbo/ directory with:
jumbo project init
The init wizard walks you through:
jumbo project init automatically configures hooks for popular AI agents. At session start, your agent receives project status—recently completed, active, and planned goals. When you start a goal, a comprehensive context packet is delivered with the details necessary for implementation.
Jumbo organizes knowledge into a few key concepts:
Track what you're working on:
jumbo goal add --objective "Implement user auth"
jumbo goal start --goal-id <id>
jumbo goal complete --goal-id <id>
Capture architectural decisions your agent must respect:
jumbo decision add --title "CQRS for all data access" --rationale "Separate read/write models for scalability and clarity"
Define non-negotiable rules—the lines your agent cannot cross:
jumbo invariant add --category "Architecture" --description "Common Closure Principle: classes that change together live together. No scattering related logic across modules."
Track system components:
jumbo component add --name "AuthService" --description "Handles user authentication"
PROJECT
audience add/remove/update Manage target audiences
audiencePain add/resolve Track audience pain points
project init/update Initialize and configure
value add/remove/update Value propositions
WORK
goal add/start/complete Track goals and progress
goal block/unblock Handle blockers
session start/end/pause Manage work sessions
SOLUTION
architecture define/update System architecture
component add/update/remove System components
decision add/reverse Architectural decisions
dependency add/remove Component dependencies
guideline add/remove Execution guidelines
invariant add/remove Non-negotiable rules
Run jumbo --help for the complete list.
Jumbo is built with:
| Package | Purpose |
|---|---|
| better-sqlite3 | Local event store and projections |
| commander | CLI framework |
| chalk | Terminal styling |
| yaml | Context serialization |
| inversify | Dependency injection |
| ulid | Time-sortable unique IDs |
How does jumbo integrate with my AI agent?
Through hooks. Your agent calls jumbo session start at the beginning of a session, and jumbo injects relevant project context. A richer context packet is delivered to the agent when it starts work on a goal. New insights are captured in the natural flow of your agent conversations.
What if I change agents or models?
Change agents and models at will. jumbo just picks up where you left off.
What coding agents does jumbo work with?
jumbo has been tested with Claude Code CLI, Gemini CLI, and Copilot CLI. More to be verified soon...
What IDEs are supported?
Theoretically, any IDE with an integrated coding agent should work. VS Code running GitHub Copilot has been tested and works well with all supported models. Cursor to be verified soon...
Where is data stored?
Locally, in .jumbo/ within your project. Nothing leaves your machine unless you want it to.
Can I share context across a team?
Not yet. A teams version is coming soon.
If you're feeling bold, you can try committing .jumbo/ directory to your repository—not recommended though. Without very tight coordination you're bound to encounter problems. jumbo uses Event Sourcing under the hood, working asynchronously will definitely result in out-of-sequence events.
Built for developers who are tired of repeating themselves.
FAQs
AI memory like and elephant for your coding agent.
We found that @jumbo-ctx/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.