
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@ulinkly/setup
Advanced tools
Set up ULink deep linking with your AI coding assistant (Claude Code, Cursor, Antigravity)
Set up ULink deep linking with one command using Claude Code, Cursor, or Antigravity.
npx @ulinkly/setup
This detects your AI coding tools and configures the ULink MCP server + onboarding skill automatically. Then open your AI assistant in your project and ask it to "setup ulink".
# Install the plugin (includes MCP server + onboarding skill)
claude plugin marketplace add FlywheelStudio/ulink-ai-setup
claude plugin install ulink-onboarding@ulink
Restart Claude Code, then run /setup-ulink in your project.
1. Add MCP server — add to ~/.cursor/mcp.json:
{
"mcpServers": {
"ulink": {
"command": "npx",
"args": ["-y", "@ulinkly/mcp-server@0.1.12"]
}
}
}
2. Install skill — copy skills/setup-ulink/ to ~/.cursor/skills/setup-ulink/.
Restart Cursor, then ask the agent: "setup ulink".
1. Add MCP server — add to ~/.gemini/antigravity/mcp_config.json:
{
"mcpServers": {
"ulink": {
"command": "npx",
"args": ["-y", "@ulinkly/mcp-server@0.1.12"]
}
}
}
2. Install skill — copy skills/setup-ulink/ to ~/.gemini/antigravity/skills/setup-ulink/.
Restart Antigravity, then ask the agent: "setup ulink".
The AI uses the CLI for verification. Install it with:
curl -fsSL https://ulink.ly/install.sh | bash
MIT
FAQs
Set up ULink deep linking with your AI coding assistant (Claude Code, Cursor, Antigravity)
We found that @ulinkly/setup demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.