
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
@skillhq/linkedin
Advanced tools
LinkedIn CLI for reading feed, profiles, connections, search results, and messages
A CLI tool for reading LinkedIn feed, profiles, connections, search results, and messages.
npm install -g @skillhq/linkedin
Or clone and build from source:
git clone https://github.com/skillhq/linkedin.git
cd linkedin
npm install
npm run build
npm link
The CLI uses cookie-based authentication with LinkedIn's Voyager API. You'll need your li_at and JSESSIONID cookies from an active LinkedIn session.
The CLI can automatically extract cookies from your browser using @steipete/sweet-cookie:
linkedin check # Auto-extract from default browser
linkedin check --cookie-source chrome
linkedin check --chrome-profile "Profile 1"
li_at and JSESSIONID valueslinkedin setup --li-at "VALUE" --jsessionid "VALUE"linkedin check # Verify credentials are valid
linkedin whoami # Show logged-in user info
linkedin setup # Show setup instructions
linkedin feed [-n 20] # Get home feed posts
linkedin profile <username> # View a profile by username or URL
linkedin connections [-n 50] # List your connections
linkedin search "query" [-t type] # Search people, jobs, companies, posts
linkedin inbox [-n 20] # List message conversations
linkedin read <conversation-id> # Read messages from a conversation
--json # Output in JSON format
--li-at <token> # Provide li_at cookie directly
--jsessionid <token> # Provide JSESSIONID cookie directly
--cookie-source <browser> # Browser to extract cookies from
--chrome-profile <name> # Chrome profile name
--timeout <ms> # Request timeout in milliseconds
LinkedIn aggressively invalidates API sessions. For more reliable access, use browser automation with the Claude chrome extension. See SKILL.md for details.
npm run build # Build TypeScript
npm run dev # Watch mode
npm run clean # Clean dist folder
MIT
FAQs
LinkedIn CLI for reading feed, profiles, connections, search results, and messages
The npm package @skillhq/linkedin receives a total of 0 weekly downloads. As such, @skillhq/linkedin popularity was classified as not popular.
We found that @skillhq/linkedin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.