
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@walavave/cc98-cli
Advanced tools
CC98 的命令行客户端,有适合日常浏览的 TUI,以及面向脚本使用的 CLI 。
cc98:进入终端界面。cc98 <command>:执行 CLI,默认输出 JSON。这是一个个人兴趣项目,改版自Lucent-Snow的CC98-CLI,风格和TUI布局模式参考Yazi。
基于 CC98 的公开接口实现,与 CC98 官方无关。请合理使用本工具,避免违反 CC98 的用户协议。
atrust验证;魔法VPN不开启TUN模式下也可以使用.pdf .docs等Kitty(KPG)和iterm2渲染,在基于libghostty的终端上完成验证
需要 Node.js 20+。
npm install -g @walavave/cc98-cli
安装后命令是:
cc98
cc98 login
多账号:
cc98 account list
cc98 account use <name>
cc98 --account <name> me
登录成功后会按账号自动执行每日签到;默认每天最多尝试一次,使用北京时间日期判断。
如需关闭:
[account]
auto_signin = false
也可以手动执行:
cc98 me signin
cc98
常用按键:
j/k 或 ↑/↓ 上下移动
l 或 → 进入下一层
h 或 ← 返回上一层
Enter 确认执行
f 跳到搜索框
r 刷新
? 显示帮助
n 或 Space 加载更多
a 用户页关注 / 取消关注
a / s 对当前楼层点赞 / 点踩
c 帖子评论 / 私聊发送输入框
Shift+c 引用当前楼层并打开评论框
d 收藏 / 取消收藏当前帖子
z / x 进入帖子对应版面 / 复制帖子链接
Shift+Enter 评论框内换行
q 退出
左栏导航包含:十大、收藏、最新、搜索、版面、关注、消息、我的、设置。
配置文件路径按系统区分,未设置时使用默认值:
~/.config/cc98-cli/config.toml~/.config/cc98-cli/config.toml%APPDATA%\\cc98-cli\\config.toml如果设置了 XDG_CONFIG_HOME,会优先使用 $XDG_CONFIG_HOME/cc98-cli/config.toml。
[tui]
hide_top_chrome = false
preview_images = true
navigation_history_limit = 10
clear_cache_on_exit = true
post_signature = "[right][color=#808080]——来自终端应用[/color]「[b][url=https://github.com/walavave/CC98-CLI]CC98 CLI[/url][/b]」[/right]"
图片预览目前支持 Kitty graphics protocol 和 iTerm2 inline image。若终端不支持对应协议,会保留文本图片占位。
post_signature 只会在发送评论时追加到正文末尾,不会显示在编辑中的评论框里;支持 \n、\t 等常见转义。
navigation_history_limit 控制 TUI 内“帖子 -> 用户 -> 帖子”这类右键深入导航的最大历史层数;超过后会清空这条返回链,后续左键返回会直接回到左侧栏对应主界面。
clear_cache_on_exit 控制 TUI 在按 q 退出后是否清理缓存,默认开启。
当前可配置快捷键都在对应系统配置目录下的 keymap.toml 的 prepend_keymap 里:
~/.config/cc98-cli/keymap.toml~/.config/cc98-cli/keymap.toml%APPDATA%\\cc98-cli\\keymap.toml如果设置了 XDG_CONFIG_HOME,会优先使用 $XDG_CONFIG_HOME/cc98-cli/keymap.toml。格式参考 keymap.toml,组合键使用尖括号表示,例如:
[tui]
prepend_keymap = [
{ on = "C", run = "compose.open", desc = "打开评论框或私信输入框" },
{ on = "F", run = "search.focus-input", desc = "跳到搜索框" },
{ on = "<A-Down>", run = "topic.next-reply", desc = "下一条回复" },
{ on = "<A-Up>", run = "topic.previous-reply", desc = "上一条回复" },
{ on = "A", run = "topic.like-post", desc = "点赞当前楼层" },
{ on = "S", run = "topic.dislike-post", desc = "点踩当前楼层" },
{ on = "D", run = "topic.favorite-topic", desc = "收藏当前帖子" },
{ on = "<C-a>", run = "compose.open-emotion", desc = "在评论框中打开表情面板" },
]
prepend_keymap 当前支持的 run 动作只有这些:
compose.open:打开评论框或私信输入框,默认内置按键:csearch.focus-input:跳到搜索页输入框,默认内置按键:fcompose.open-emotion:在评论框或私信输入框中打开表情面板,默认内置按键:<C-a>topic.next-reply:在主题页跳到下一条回复,默认内置按键:<A-Down>topic.previous-reply:在主题页跳到上一条回复,默认内置按键:<A-Up>topic.like-post:在主题页给当前楼层点赞,默认内置按键:atopic.dislike-post:在主题页给当前楼层点踩,默认内置按键:stopic.favorite-topic:在主题页收藏或取消收藏当前帖子,默认内置按键:dprepend_keymap 中的自定义绑定会优先于内置默认值。
on 字段支持:
"a"、"F"、"/""<Up>"、"<Down>"、"<Left>"、"<Right>""<Enter>"、"<Esc>"、"<Tab>"、"<Space>"、"<Backspace>""<A-Up>"、"<A-Down>",也兼容 "<M-Up>"、"<Alt-Up>"、"<Option-Up>""<C-a>" 这类写法如果要写多段按键序列,也可以把 on 写成数组,例如:
[tui]
prepend_keymap = [
{ on = ["g", "g"], run = "search.focus-input", desc = "示例:双击 g" },
]
CLI 默认输出 JSON,适合配合 jq 或脚本使用。
cc98 me
cc98 topic <topic-id>
cc98 board <board-id>
cc98 search <keyword>
cc98 message recent
cc98 update
查看完整命令:
cc98 --help
cc98 topic --help
cc98 user --help
cc98 update --help
登录信息和缓存保存在:
Linux: ~/.cc98-cli/
macOS: ~/.cc98-cli/
Windows: %APPDATA%\cc98-cli\
npm install
npm run check
npm run build
node dist/main.js
MIT
FAQs
A native TypeScript CLI and TUI client for CC98.
The npm package @walavave/cc98-cli receives a total of 15 weekly downloads. As such, @walavave/cc98-cli popularity was classified as not popular.
We found that @walavave/cc98-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.