
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
Claude Code has features gated behind feature flags and gradual rollouts. CC-Hacks unlocks them.
┌─────────────────────────────────────────────────────────────┐
│ │
│ 🔒 Teammate Tool → 🔓 UNLOCKED │
│ 🔒 Session Memory → 🔜 COMING SOON │
│ 🔒 Custom Keybindings → 🔜 COMING SOON │
│ │
└─────────────────────────────────────────────────────────────┘
⚠️ Disclaimer: Unofficial patches. Use at your own risk. Requires valid Claude Code subscription.
# Enable swarm mode (Teammate tool)
npx cc-hacks enable swarm
# Run Claude with hacks enabled
cc
That's it. The cc command runs Claude Code with all your enabled hacks.
| Hack | Status | Description | Requires |
|---|---|---|---|
| swarm | ✅ Available | Teammate tool for parallel agents | Max/Team/Enterprise |
| memory | 🔜 Coming | Persistent memory across sessions | Any |
| keybinds | 🔜 Coming | Custom keyboard shortcuts | Any |
Enables the Teammate tool - spawn parallel Claude instances that work together.
npx cc-hacks enable swarm
Then in Claude:
"Spawn a team of 3 agents to analyze this codebase"
npx cc-hacks enable <hack> # Enable a hack
npx cc-hacks disable <hack> # Disable a hack
npx cc-hacks list # List available hacks
npx cc-hacks status # Show what's enabled
npx cc-hacks update # Re-patch after Claude updates
npx cc-hacks uninstall # Remove everything
cc # Run Claude with all enabled hacks
~/.cc-hacks/
├── config.json # Your enabled hacks
├── cli.js # Patched Claude Code
└── bin/
└── cc # Command to run it
Claude Code uses Statsig for feature flags. We patch the local CLI to bypass:
// Before (checks remote flag)
function D8() {
return V4("tengu_brass_pebble", false);
}
// After (always enabled)
function D8() {
return true;
}
claude commandIf Claude Code updates and things break:
npx cc-hacks update
This re-copies the CLI and re-applies your enabled hacks.
npx cc-hacks uninstall
Or manually:
rm -rf ~/.cc-hacks
# Remove the cc-hacks line from ~/.zshrc
cc instead of claude?We don't modify your original claude command. The cc command runs the patched version, so you can always use vanilla claude if needed.
Yes! CC-Hacks finds your Claude Code installation (npm or native) and patches a copy.
We only modify local files. You still need a valid subscription. We're not bypassing payment - just enabling features that exist in the code.
Found another hidden feature? PRs welcome!
hacks/
├── swarm.js # Teammate tool
├── memory.js # Session memory (TODO)
└── your-hack.js # Add yours!
MIT
Built with Claude Code by @numman-ali
Not affiliated with Anthropic.
FAQs
Unlock hidden features in Claude Code
We found that cc-tweaks demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.