
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@z_ai/coding-helper
Advanced tools
A CLI helper for GLM Coding Plan Users to manage coding tools like claude-code.
Currently supported coding tools:
Prerequisite: make sure Node.js 18 or later is installed.
## Run directly with npx
npx @z_ai/coding-helper
## Install @z_ai/coding-helper globally first
npm install -g @z_ai/coding-helper
## Then run chelper
chelper
Once you enter the wizard UI, use the Up/Down arrow keys to navigate and press Enter to confirm each action, following the guided initialization flow.
The wizard will help you complete:
Besides the interactive wizard, chelper also supports executing every feature directly through CLI arguments:
# Show help
chelper -h
chelper --help
# Show version
chelper -v
chelper --version
# Run the initialization wizard
chelper init
# Language management
chelper lang show # Display the current language
chelper lang set zh_CN # Switch to Chinese
chelper lang set en_US # Switch to English
chelper lang --help # Show help for language commands
# API key management
chelper auth # Interactively set the key
chelper auth glm_coding_plan_global <token> # Choose the Global plan and set the key directly
chelper auth glm_coding_plan_china <token> # Choose the China plan and set the key directly
chelper auth revoke # Delete the saved key
chelper auth reload claude # Load the latest plan info into the Claude Code tool
chelper auth --help # Show help for auth commands
# Health check
chelper doctor # Inspect system configuration and tool status
The configuration file is stored at ~/.chelper/config.yaml:
lang: zh_CN # UI language
plan: glm_coding_plan_global # Plan type: glm_coding_plan_global or glm_coding_plan_china
api_key: your-api-key-here # API key
FAQs
GLM Coding Plan Helper for managing multi coding tools
The npm package @z_ai/coding-helper receives a total of 10,624 weekly downloads. As such, @z_ai/coding-helper popularity was classified as popular.
We found that @z_ai/coding-helper demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.