
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Analyze your Claude Code token usage and costs from local JSONL files — incredibly fast and informative!
Thanks to ccusage's incredibly small bundle size (), you can run it directly without installation:
# Using bunx (recommended for speed)
bunx ccusage
# Using npx
npx ccusage@latest
# Using deno (with security flags)
deno run -E -R=$HOME/.claude/projects/ -S=homedir -N='raw.githubusercontent.com:443' npm:ccusage@latest
💡 Tip: We recommend using
bunx
instead ofnpx
for a massive speed improvement!
Since ccusage has such a small bundle size, installation is entirely optional:
npm install -g ccusage
# Basic usage
ccusage # Show daily report (default)
ccusage daily # Daily token usage and costs
ccusage monthly # Monthly aggregated report
ccusage session # Usage by conversation session
ccusage blocks # 5-hour billing windows
# Live monitoring
ccusage blocks --live # Real-time usage dashboard
# Filters and options
ccusage daily --since 20250525 --until 20250530
ccusage daily --json # JSON output
ccusage daily --breakdown # Per-model cost breakdown
ccusage daily --timezone UTC # Use UTC timezone
ccusage daily --locale ja-JP # Use Japanese locale for date/time formatting
# Project analysis
ccusage daily --instances # Group by project/instance
ccusage daily --project myproject # Filter to specific project
ccusage daily --instances --project myproject --json # Combined usage
blocks --live
--breakdown
flag--since
and --until
--json
--offline
(Claude models only)--instances
flag and filter by specific projects--timezone
option--locale
option (e.g., en-US, ja-JP, de-DE)Full documentation is available at ccusage.com
Check out these 47 Claude Code ProTips from Greg Baugues.
ClaudeLog
by InventorBlack
A comprehensive knowledge base with detailed breakdowns of advanced topics, including:
FAQs
Usage analysis tool for Claude Code
The npm package ccusage receives a total of 18,879 weekly downloads. As such, ccusage popularity was classified as popular.
We found that ccusage demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.