
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@zenalexa/openclaw-unicli
Advanced tools
OpenClaw Bundle MCP plugin that exposes Uni-CLI as an MCP server — 220 sites, 1283 commands.
This is a Bundle MCP plugin. OpenClaw reads openclaw.plugin.json, finds the mcpServers block, and launches unicli mcp serve as a child process. All four smart-default tools (unicli_run, unicli_list, unicli_search, unicli_explore) are available immediately inside OpenClaw without any extra configuration.
unicli must be installed globally before loading this plugin:
npm i -g @zenalexa/unicli
openclaw plugins install @zenalexa/openclaw-unicli
Or copy openclaw.plugin.json manually to ~/.openclaw/plugins/unicli/openclaw.plugin.json.
| Tool | Description |
|---|---|
unicli_run | Execute any Uni-CLI command (site + command + args) |
unicli_list | List available sites and commands, filter by site or type |
unicli_search | Search commands by intent, including bilingual EN/ZH |
unicli_explore | Auto-discover API endpoints for any URL |
{ "site": "hackernews", "command": "top", "limit": 10 }
{ "site": "twitter", "type": "web-api" }
{ "query": "推特热门", "limit": 5 }
{ "url": "https://example.com", "goal": "get trending posts" }
Apache-2.0
FAQs
Uni-CLI plugin for OpenClaw — 220 sites, 1283 commands via MCP
The npm package @zenalexa/openclaw-unicli receives a total of 1 weekly downloads. As such, @zenalexa/openclaw-unicli popularity was classified as not popular.
We found that @zenalexa/openclaw-unicli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.