
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
@scenius/sceni-code-core
Advanced tools

AI-powered command-line workflow tool for developers. Without telemetry.
Installation • Quick Start • Features • Documentation • Contributing
Sceni Code is a fork of Qwen code, which in turn is a fork of Gemini used within our company
Ensure you have Node.js version 20 or higher installed.
curl -qL https://www.npmjs.com/install.sh | sh
npm install -g @scenius/sceni-code@latest
sceni --version
git clone https://github.com/scenius-software/sceni-code.git
cd sceni-code
npm install
npm install -g .
Mount both the current directory and user settings:
Unix/Linux/macOS:
docker run -it \
-v "$(pwd):/workspace" \
-v "$HOME/.sceni:/home/node/.sceni" \
nickheskes/sceni-code
PowerShell (Windows):
docker run -it `
-v "${PWD}:/workspace" `
-v "$env:USERPROFILE\.sceni:/home/node/.sceni" `
nickheskes/sceni-code
# Start Sceni Code
sceni
# Example commands
> Explain this codebase structure
> Help me refactor this function
> Generate unit tests for this module
/compress - Compress conversation history/clear - Clear all conversation history and start fresh/status - Check current token usage/help - Display available commands/clear - Clear conversation history/compress - Compress history to save tokens/status - Show current session information/exit or /quit - Exit Sceni CodeCtrl+C - Cancel current operationCtrl+D - Exit (on empty line)Up/Down - Navigate command historyIf you encounter issues, check the troubleshooting guide.
This project is based on Qwen. Our hero's for LLM development and tooling. Which is based on, This project is based on Google Gemini CLI. We acknowledge and appreciate the excellent work of the Gemini CLI team. Our main contribution focuses on parser-level adaptations to better support Qwen-Coder models.
FAQs
Sceni Code Core
We found that @scenius/sceni-code-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.