
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
@moonshot-ai/kimi-code
Advanced tools
The Starting Point for Next-Gen Agents
Kimi Code CLI is an AI coding agent that runs in your terminal. It can read and edit code, run shell commands, search files, fetch web pages, and choose the next step based on the feedback it receives. It works out of the box with Moonshot AI's Kimi models and can also be configured to use other compatible providers.
The recommended install path is the official script. It does not require Node.js to be installed first.
curl -fsSL https://code.kimi.com/kimi-code/install.sh | bash
irm https://code.kimi.com/kimi-code/install.ps1 | iex
On Windows, install Git for Windows before first launch because Kimi Code CLI uses the bundled Git Bash as its shell environment. If Git Bash is installed in a custom location, set
KIMI_SHELL_PATHto the absolute path ofbash.exe.
Then run it with a new Terminal session:
kimi --version
If you prefer npm, use Node.js 22.19.0 or later:
npm install -g @moonshot-ai/kimi-code
Or with pnpm:
pnpm add -g @moonshot-ai/kimi-code
For upgrade and uninstall instructions, see the Getting Started guide.
Open a project and start the interactive UI:
cd your-project
kimi
On first launch, run /login inside Kimi Code CLI and choose either Kimi Code OAuth or a Kimi Platform API key. After login, try a first task:
Take a look at this project and explain the main directories.
/mcp-config — no hand-editing JSON.coder, explore, and plan subagents in isolated context windows; the main conversation stays clean.MIT
FAQs
The Starting Point for Next-Gen Agents
The npm package @moonshot-ai/kimi-code receives a total of 0 weekly downloads. As such, @moonshot-ai/kimi-code popularity was classified as not popular.
We found that @moonshot-ai/kimi-code demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.