
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@onebrain-ai/cli
Advanced tools
Local-first Rust CLI for OneBrain — personal AI OS for Obsidian. Downloads the matching platform binary from GitHub Releases on install.
npm wrapper for the OneBrain CLI — the local-first Rust binary that powers the OneBrain personal AI OS for Obsidian.
npm install -g @onebrain-ai/cli
onebrain --version
This package is a thin installer. On install,
postinstall.jsdownloads the matching platform-native binary from the corresponding GitHub Release, verifies its SHA-256, and stages it at./bin/onebrain(onebrain.exeon Windows); theonebraincommand is a small Node shim that execs the native binary.📖 Full documentation — install paths, the command tree, output modes, architecture, and roadmap — lives in the repo README.
The postinstall auto-detects your host and pulls the matching binary. On Linux it detects libc (glibc vs musl) and 32-bit ARM version (ARMv6 vs ARMv7) at install time — every Raspberry Pi from Pi 1 to Pi 5 is covered.
| Host | Binary |
|---|---|
| macOS · Apple Silicon (M1–M5) | onebrain-aarch64-apple-darwin.tar.gz |
| macOS · Intel | onebrain-x86_64-apple-darwin.tar.gz |
| Linux · ARM64 glibc (Pi 3/4/5 64-bit OS · Pi Zero 2 W) | onebrain-aarch64-unknown-linux-gnu.tar.gz |
| Linux · ARMv7 32-bit (Pi 2 v1.1+ · Pi 3/4/5 32-bit OS) | onebrain-armv7-unknown-linux-gnueabihf.tar.gz |
| Linux · ARMv6 32-bit (Pi 1 · Pi Zero · Pi Zero W) | onebrain-arm-unknown-linux-gnueabihf.tar.gz |
| Linux · x86_64 glibc | onebrain-x86_64-unknown-linux-gnu.tar.gz |
| Linux · x86_64 musl / Alpine | onebrain-x86_64-unknown-linux-musl.tar.gz |
| Windows · ARM64 | onebrain-aarch64-pc-windows-msvc.zip |
| Windows · x86_64 | onebrain-x86_64-pc-windows-msvc.zip |
If auto-detection misfires, override it: ONEBRAIN_CLI_LIBC=glibc|musl or ONEBRAIN_CLI_ARM=v6|v7 before npm install. (Note: only x86_64 musl is published — arm64 musl hosts should use a glibc base or build from source.)
brew install onebrain-ai/onebrain/onebrainonebrain update (Homebrew installs delegate to brew upgrade)All paths resolve to the same per-platform binary — see the repo README for the full comparison.
For environments that supply the binary out-of-band:
ONEBRAIN_CLI_SKIP_POSTINSTALL=1 npm install -g @onebrain-ai/cli
The shim runs but exits 127 until the binary is staged at node_modules/@onebrain-ai/cli/bin/onebrain.
Source lives at npm-wrapper/. CI publishes on each stable vMAJOR.MINOR.PATCH tag via npm Trusted Publishers (OIDC, no long-lived token) with --provenance for a Sigstore attestation — never published manually, and prerelease tags (containing -) are skipped. The wrapper version always equals the binary release version.
AGPL-3.0-only, matching the upstream CLI binary. For commercial licensing, contact hello@onebrain.run.
FAQs
Local-first Rust CLI for OneBrain — personal AI OS for Obsidian. Downloads the matching platform binary from GitHub Releases on install.
The npm package @onebrain-ai/cli receives a total of 4,235 weekly downloads. As such, @onebrain-ai/cli popularity was classified as popular.
We found that @onebrain-ai/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.