
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
claude-search
Advanced tools
Full-text search across all your Claude Code session history — find past conversations, extract code snippets, inspect session metadata, and jump straight back into any session.
claude-search "redis connection error" --since "2 weeks ago"
Claude Code stores every conversation as a .jsonl file under ~/.claude/projects/. Each line is a JSON record — a user message, assistant reply, tool call, or metadata event. claude-search reads those files directly, no server required.
claude in your PATH)npm install -g claude-search
Verify it works:
claude-search --help
git clone https://github.com/pi-netizen/claude-search.git
cd claude-search
npm install
npm test # Node.js 18+ built-in test runner, no extra deps
Tests cover parseSince, extractCodeBlocks, projectName, and loadMessages (including corrupt-line handling).
You recall discussing a tricky bug but can't remember which project or session.
claude-search "segmentation fault"
Output groups matches by session, newest first, with the project name and date:
myapp › a1b2c3d4 · Feb 20, 2026
· claude --resume a1b2c3d4-...full-uuid...
──────────────────────────────────────────────────────────
User what's causing this segmentation fault in the C extension?
Assistant The issue is a dangling pointer in line 42 of ext.c — you're
freeing `buf` before the callback fires…
╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌
Each session header includes the exact claude --resume command — copy it to jump straight back in.
You want the actual implementation, not surrounding chat.
claude-search "rate limiter" --code-only
Only messages whose fenced code blocks contain the query are shown, rendered with language labels:
api-service › f3e2d1c0 · Feb 18, 2026
· claude --resume f3e2d1c0-...
──────────────────────────────────────────────────────────
┌─ python
│ class RateLimiter:
│ def __init__(self, max_calls, period):
│ self.calls = deque()
│ self.max_calls = max_calls
│ self.period = period
└──────────────────────────────────────
Your search returns 40 matches. Most are from months ago and irrelevant.
claude-search "authentication" --since "2 weeks ago" --limit 10
--since accepts natural language or ISO dates:
| Value | Meaning |
|---|---|
"3 days ago" | Last 3 days |
"1 week ago" | Last 7 days |
"2 months ago" | Last ~60 days |
"2024-01-15" | On or after Jan 15 2024 |
You find the session you were looking for and want to resume it immediately.
claude-search "docker compose" --open
Shows search results as normal, then automatically runs claude --resume <session-id> on the top match, opening it in your terminal.
Or use the resume command printed under every session header:
claude --resume a1b2c3d4-3307-4fc4-992a-42ba0ca49246
You have a session ID (from search results or ~/.claude/projects/) and want metadata before deciding whether to resume.
claude-search session a1b2c3d4-3307-4fc4-992a-42ba0ca49246
myapp
repo github.com/you/myapp
session a1b2c3d4-3307-4fc4-992a-42ba0ca49246
file ~/.claude/projects/-Users-you-myapp/a1b2c3d4-....jsonl
started Feb 20, 2026 at 9:12:04 AM
ended Feb 20, 2026 at 11:45:30 AM
turns 42 user · 43 assistant · 187 total records
resume claude --resume a1b2c3d4-3307-4fc4-992a-42ba0ca49246
── first prompt ─────────────────────────────────────────────────────
Help me debug the rate limiter — it's allowing twice the configured
requests per second under load…
── last prompt ──────────────────────────────────────────────────────
Great, now write tests for the token bucket implementation.
claude-search "migration" --project myapp
--project does a partial, case-insensitive match on the directory name Claude Code uses for that project.
By default, 1 message before and after each match is shown. Increase it:
claude-search "the fix" --context 3
When Claude uses extended thinking, reasoning blocks are stored in the session. Surface them:
claude-search "O(n²)" --reasoning
Shows up to 3 lines of the thinking block before and after the matched line, with the hit line highlighted with ▶.
claude-search [options] <query>
claude-search session <session-id>
| Flag | Default | Description |
|---|---|---|
-d, --dir <path> | ~/.claude/projects | Sessions directory to search |
-l, --limit <n> | 20 | Max matches to show |
-p, --project <name> | — | Filter by project name (partial match) |
-C, --context <n> | 1 | Context messages around each match |
-s, --case-sensitive | false | Case-sensitive search |
--since <when> | — | Only sessions after this date |
--code-only | false | Only show code blocks containing the match |
--reasoning | false | Show AI reasoning/thinking around the match |
--open | false | Open the top matching session in Claude Code |
| Command | Description |
|---|---|
session <id> | Show metadata and first/last prompts for a session |
myapp › a1b2c3d4 · Feb 20, 2026 [github.com/you/myapp]
· claude --resume a1b2c3d4-3307-4fc4-992a-42ba0ca49246
──────────────────────────────────────────────────────────────────────
User (context message before the match)
Assistant …matched text with the query highlighted…
┌─ typescript
│ // code block found in that message
└────────────────────────────────────
User (context message after the match)
╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌
MIT
FAQs
Search across all your Claude Code session history
We found that claude-search demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.