
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
AuthShore CLI - auth infrastructure for coding agents. User pools, secrets vault, token management. As easy as git.
Auth infrastructure for coding agents. User pools, secrets vault, token management. As easy as git.
npm install -g authshore
Real terminal sessions against the live API — click a GIF for the full video.
| Zero to auth in 60s | Secrets vault | Tokens & pools |
|---|---|---|
![]() | ![]() | ![]() |
More demos: authshore.ai/#demo
# 1. Create a project
as signup my-project --email you@example.com --local
# 2. Create a user pool
as pool create main
# 3. Store a secret
as secret set DATABASE_URL "postgres://user:pass@host:5432/db"
# 4. Authenticate a user in your pool
as pool auth signup main --email user@example.com --password SecurePass123!
as signup <slug> [--email E] [--local] # Create project + get API key
as login --key <key> [--local] # Store API key
as logout # Clear stored key
as me # Show project info
as config # Show current config
as pool create <name> # Create user pool
as pool list # List pools
as pool show <id> # Pool details
as pool delete <id> # Delete pool
as pool users <id> # List pool users
as pool user add <id> --email E --password P
as pool auth signup <id> --email E --password P
as pool auth signin <id> --email E --password P
as secret set <key> <value> [--env E] # Store encrypted secret
as secret get <key> # Read secret (decrypted)
as secret list # List all secrets
as secret delete <key> # Delete secret
as secret versions <key> # List versions
as token validate <jwt> # Validate JWT
as token refresh <refresh-token> # Refresh token pair
as token revoke <token> # Revoke token
as status # Health check
--json # Output raw JSON (for programmatic parsing)
--key <key> # Override API key for this call
--url <url> # Override base URL
--local # Save config to .authshore/ (project) instead of ~/.authshore/ (global)
API key is resolved in this order (highest priority first):
--key flagAUTHSHORE_API_KEY environment variable./.authshore/config.json (project-local)~/.authshore/config.json (global)Add to your agent's rules file:
CLAUDE.md / .cursorrules / .clinerules / .windsurfrules:
## Auth
Use the `as` CLI for auth infrastructure.
Config is in .authshore/config.json (auto-loaded).
Run `as help` for full reference.
Proprietary — Tyga.Cloud Ltd (UK #14643275). See LICENSE file.
FAQs
AuthShore CLI - auth infrastructure for coding agents. User pools, secrets vault, token management. As easy as git.
The npm package authshore receives a total of 54 weekly downloads. As such, authshore popularity was classified as not popular.
We found that authshore demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.