
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
claude-codex-gemini
Advanced tools
Multi-AI development pipeline orchestrated by Gemini with Claude and Codex agents
A cross-platform development pipeline orchestrating Gemini, Claude, and Codex for autonomous planning, implementation, and review.
In your existing project:
bunx claude-codex-gemini init
# or with npm
npx claude-codex-gemini init
This creates:
.multi-ai-pipeline/ - Pipeline orchestration filesGEMINI.md - Adds pipeline reference.gitignore - Adds .task/.task/ - Pipeline state directoryClone the repo and copy the necessary files manually:
git clone https://github.com/Z-M-Huang/claude-codex-gemini.git
Bun - Runtime for TypeScript scripts Install from https://bun.sh (see site for platform-specific instructions)
Claude CLI - AI agent executor
# Install from https://claude.com/claude-code
npm install -g @anthropic-ai/claude-cli
claude auth
Codex CLI - Final review gate
# Install from https://codex.openai.com
npm install -g @openai/codex-cli
codex auth
Gemini CLI - Orchestrator
# Available at https://ai.google.dev/gemini-api/docs/cli
Tell Gemini what you want:
"Add authentication to the API"
Gemini orchestrates the pipeline:
Review results:
All outputs are in .task/ directory as JSON files.
The pipeline auto-detects the current phase by checking which .task/*.json files exist:
Requirements → Planning → Plan Review → Implementation → Code Review → Complete
↓ ↓
(Sonnet → Opus → Codex) (Sonnet → Opus → Codex)
| File Missing | Phase | Agent |
|---|---|---|
user-story.json | Requirements | requirements-gatherer (Opus) |
plan-refined.json | Planning | planner (Opus) |
review-sonnet.json | Plan Review (Sonnet) | plan-reviewer (Sonnet) |
review-opus.json | Plan Review (Opus) | plan-reviewer (Opus) |
review-codex.json | Plan Review (Codex) | codex-reviewer |
impl-result.json | Implementation | implementer (Sonnet) |
code-review-sonnet.json | Code Review (Sonnet) | code-reviewer (Sonnet) |
code-review-opus.json | Code Review (Opus) | code-reviewer (Opus) |
code-review-codex.json | Code Review (Codex) | codex-reviewer |
All operations use these 3 TypeScript scripts (Windows/macOS/Linux):
Cross-platform JSON operations for state management:
bun scripts/json-tool.ts get .task/state.json .status
bun scripts/json-tool.ts set .task/state.json status=implementing
bun scripts/json-tool.ts set .task/state.json +iterations.plan_review_sonnet
Spawns Claude CLI with agent context:
bun scripts/run-claude-code.ts \
--agent-file agents/planner.md \
--output .task/plan-refined.json \
--model opus \
--instructions "Create implementation plan"
Features:
Wraps Codex CLI for reviews:
bun scripts/run-codex.ts --type plan
bun scripts/run-codex.ts --type code --timeout 1800
Features:
.codex-session-plan, .codex-session-code)Reviews happen sequentially (NOT parallel) for quality gates:
Plan Review: Sonnet → Opus → Codex Code Review: Sonnet → Opus → Codex
Each reviewer must approve before proceeding. If needs_changes, Gemini fixes and re-reviews (max 10 iterations per reviewer).
6 specialized agents in agents/ directory:
| Agent | Model | Purpose |
|---|---|---|
| requirements-gatherer | Opus | Gather user requirements |
| planner | Opus | Create implementation plans |
| plan-reviewer | Sonnet/Opus | Review plans |
| implementer | Sonnet | Implement plans |
| code-reviewer | Sonnet/Opus | Review code |
| codex-reviewer | Codex | Final gate reviews |
All pipeline state lives in .task/:
.task/
├── state.json # Pipeline state, iteration counters
├── user-story.json # Requirements
├── plan-refined.json # Implementation plan
├── review-sonnet.json # Sonnet's plan review
├── review-opus.json # Opus's plan review
├── review-codex.json # Codex's plan review
├── impl-result.json # Implementation results
├── code-review-sonnet.json # Sonnet's code review
├── code-review-opus.json # Opus's code review
├── code-review-codex.json # Codex's code review
├── .codex-session-plan # Codex plan review session marker
└── .codex-session-code # Codex code review session marker
Gemini tracks iterations in .task/state.json to prevent infinite loops:
{
"iterations": {
"plan_review_sonnet": 2,
"plan_review_opus": 1,
"plan_review_codex": 3,
"code_review_sonnet": 0,
"code_review_opus": 0,
"code_review_codex": 0
}
}
Max iterations: 10 per reviewer
If a reviewer hits 10 iterations, Gemini escalates to user (likely conflicting requirements).
Codex sessions are automatically managed per review type:
.task/.codex-session-plan - Plan review sessions.task/.codex-session-code - Code review sessionsBenefits:
agents/ directoryNote: The previous bash-based V0 version is available in the
archive-v0branch.
When contributing:
GPL-3.0 — see LICENSE for details.
FAQs
Multi-AI development pipeline orchestrated by Gemini with Claude and Codex agents
We found that claude-codex-gemini demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.