Company News
Jerod Santo Joins Socket as Head of Media
Allow myself to introduce... myself.
By Jerod Santo - Sep 14, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
This package has malicious versions linked to the ongoing "Mini Shai-Hulud" supply chain attack.
@tolka/cli
@tolka/cli
FAQs
Unknown package
The npm package @tolka/cli receives a total of 5 weekly downloads. As such, @tolka/cli popularity was classified as not popular.
We found that @tolka/cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 06 Mar 2024
Related posts
Research
/Security News
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.
By Kush Pandya - Sep 11, 2026
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
By Sarah Gooding - Sep 10, 2026