
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
aletria is a CLI tool designed to help developers integrate AI-driven features into their codebases
aletria is a CLI tool designed to help developers integrate AI-driven features into their codebases. Leveraging the impressive context size of Gemini 2.0, aletria automates the generation of unit tests, project documentation, and README files, streamlining your development workflow.
A big focus of this project is privacy.
This is very much experimental work!! Please make sure you have commited your work before starting this tool, in order to avoid having files edited that you didn't want.
This is not available yet, but will soon!
AI-Powered Unit Test Generation Automatically parse your source code files and generate comprehensive unit tests.
Dynamic README Generation Generate a professional project README.md by parsing your source code, unit tests, and a brief description of your project.
npx aletria@latest
aletria requires a Google AI Studio API key, this will either be retrieved from the environment using the name GOOGLE_API_KEY
or the tool, will ask you to fill the key when starting a task.
You may define the inline while calling, like this:
GOOGLE_API_KEY=your_api_key_here npx aletria@latest
aletria provides a simple CLI interface to execute its main functions. Here’s how you can get started:
Parse your source code, unit tests, README.md, and additional project files to generate comprehensive markdown documentation:
npx aletria@latest generate-docs -i ./src -o ./docs
This is not available yet!
Parse all source code files and generate unit tests:
npx aletria@latest generate-tests -i ./src -o ./tests
This is not available yet!
Generate a project README.md by parsing your source code, unit tests, and a brief project description:
npx aletria@latest generate-readme -i ./src -i ./package.json -o ./README.md
This project is licensed under the MIT License. See the LICENSE file for more details.
FAQs
aletria is a CLI tool designed to help developers integrate AI-driven features into their codebases
We found that aletria demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.