
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@kibitzsh/kibitz
Advanced tools
Real-time decoded feed of AI agent actions — monitor multiple Claude Code & Codex sessions, see exactly what each agent is doing, and coordinate swarms efficiently
Kibitz is a VS Code extension + CLI that watches Claude/Codex sessions, generates live commentary, and lets you dispatch prompts to existing or new sessions from one composer.
VS Code Extension — install from the VS Code Marketplace or search Kibitz in the Extensions panel.
CLI — Homebrew (macOS / Linux)
brew install kibitzsh/tap/kibitz
CLI — npm
npm install -g @kibitzsh/kibitz
| Platform | VS Code panel | Terminal CLI |
|---|---|---|
| macOS | Supported | Supported |
| Windows | Supported | Supported |
| Linux | Best effort | Best effort |
/help, /pause, /resume, /clear, /focus, /model, /preset/1, /2queued, started, sent, failed.Kibitz can send prompts to any active watched session (Claude or Codex), or start a new session on the current provider.
/1 New session (current provider)/2..N existing active sessions from the watcher list/1 and send your prompt./N (select only)/N <prompt> or N/ <prompt> (select + send)queued, started, sent, failed./sessions to list active sessions with numeric indexes./target <index|agent:sessionId|new-codex|new-claude>./target new-codex (or /target new-claude), then send plain text.queued, started, sent, failed.codex / codex.cmdclaude / claude.cmdnpm ci
npm run build
npm run deploy:vscode
This copies dist/ and package.json into your local extensions directory and replaces older Kibitz extension folders.
npm run build
node dist/cli/index.js
npm run typecheck
npm run check:compat
npm run test:ui
npm run test:all
Useful targeted checks:
npm run test:parsers
npm run check:session-names
npm run check:model-persistence
version in package.json.npm run test:allnpm run deploy:vscode (local smoke)npm run package (builds .vsix via vsce package).vsix to GitHub release (recommended).vsce..vsix artifacts in GitHub Releases for manual install/rollback.bin.kibitz pointing to dist/cli/index.js.kibitz.Two common paths:
npm install -g kibitz.For VS Code extensions specifically, Homebrew is optional and usually secondary to Marketplace/OpenVSX.
.vsix and changelog per version.code --install-extension <file>.vsixFor most users, start with:
.vsix artifact + release notes)Add Homebrew only if your CLI install demand is high and you want one-command setup for macOS/Linux.
Kibitz mirrors proven room patterns:
.cmd command mapping (claude.cmd, codex.cmd).FAQs
Real-time decoded feed of AI agent actions — monitor multiple Claude Code & Codex sessions, see exactly what each agent is doing, and coordinate swarms efficiently
We found that @kibitzsh/kibitz demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.