
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Complete development container that sets up Claude Code with modular devcontainer features, modern dev tools, and persistent configurations. Drop it into any project and get a production-ready AI development environment in minutes.
A curated development environment optimized for AI-powered coding with Claude Code. ClaudePod comes pre-configured with language servers, code intelligence tools, and official Anthropic plugins to streamline your development workflow.
Add ClaudePod to any project:
npx claudepod
This copies the .devcontainer/ directory to your project. Then open in VS Code and select "Reopen in Container".
npx claudepod --force # Overwrite existing .devcontainer directory
npx claudepod -f # Short form
# Install globally
npm install -g claudepod
claudepod
# Run specific version
npx claudepod@1.2.3
Open in Container
Authenticate (first time only)
claude
Follow the prompts to authenticate via browser or API key.
Start Claude Code
cc
Claude Code supports multiple authentication methods. On first run, you'll be prompted to choose:
claude
Select "Login with browser" and complete authentication in your browser. This uses your Claude.ai account.
For programmatic access or environments without browsers:
export ANTHROPIC_API_KEY="sk-ant-..."
claude
Get an API key from console.anthropic.com.
Authentication credentials are stored in /workspaces/.claude/ and persist across container rebuilds.
For more options, see the Claude Code documentation.
GitHub CLI (gh) is pre-installed for repository operations like pushing code, creating pull requests, and accessing private repositories.
gh auth login
Follow the prompts:
For automated setups or environments without browser access:
# From a file
gh auth login --with-token < ~/github-token.txt
# From environment variable
echo "$GITHUB_TOKEN" | gh auth login --with-token
Generate a token at github.com/settings/tokens with appropriate scopes (typically repo, read:org).
gh auth status
Expected output shows your authenticated account and token scopes.
GitHub CLI credentials are automatically persisted across container rebuilds. The container is configured to store credentials in /workspaces/.gh/ (via GH_CONFIG_DIR), which is part of the bind-mounted workspace.
You only need to authenticate once. After running gh auth login, your credentials will survive container rebuilds and be available in future sessions.
| Tool | Description |
|---|---|
| Python 3.14 | Base language runtime |
| Node.js LTS | JavaScript runtime |
| TypeScript | Via Node.js |
| Tool | Description |
|---|---|
uv | Fast Python package manager (pip alternative) |
npm | Node.js package manager |
pip / pipx | Python package installers |
| Tool | Description |
|---|---|
gh | GitHub CLI for repository operations |
docker | Container CLI (connects to host Docker) |
git | Version control |
jq | JSON processor |
curl | HTTP client |
agent-browser | Headless browser automation for AI agents |
| Tool | Description |
|---|---|
| tree-sitter | AST parsing for JavaScript, TypeScript, Python |
| ast-grep | Structural code search and rewriting |
| Pyright | Python language server |
| TypeScript LSP | TypeScript/JavaScript language server |
| Tool | Description |
|---|---|
claude | Claude Code CLI |
cc | Wrapper with auto-configuration |
ccusage | Token usage analyzer |
ccstatusline | Status line for sessions |
claude-monitor | Real-time usage tracking |
cc CommandThe cc command is a wrapper that:
.claude/ directory if missingcc # Start Claude Code in current directory
cc "explain this" # Start with an initial prompt
For more control, use the claude command directly:
claude # Basic invocation
claude --help # View all options
claude --resume # Resume previous session
Edit .devcontainer/.env to customize behavior:
| Variable | Default | Description |
|---|---|---|
CLAUDE_CONFIG_DIR | /workspaces/.claude | Claude configuration directory |
SETUP_CONFIG | true | Copy config files during setup |
OVERWRITE_CONFIG | true | Overwrite existing configs |
SETUP_ALIASES | true | Add cc alias to shell |
SETUP_PLUGINS | true | Install official plugins |
Default settings are in .devcontainer/config/settings.json. These are copied to /workspaces/.claude/settings.json on first run.
Key defaults:
The default system prompt is in .devcontainer/config/main-system-prompt.md. Override it by creating a .claude/system-prompt.md in your project directory.
ClaudePod includes several custom devcontainer features:
| Feature | Description |
|---|---|
claude-monitor | Real-time token usage monitoring with ML predictions |
ccusage | Usage analytics CLI |
ccstatusline | Compact powerline status display |
ast-grep | Structural code search using AST patterns |
tree-sitter | Parser with JS/TS/Python grammars |
lsp-servers | Pyright and TypeScript language servers |
agent-browser | Browser automation with accessibility snapshots and screenshots |
claude once to authenticate before using cccc command creates .claude/ in your current directory for project-specific settingsgh auth login once; credentials survive container rebuilds (stored in /workspaces/.gh/)git clone https://github.com/AnExiledDev/ClaudePod.git
cd ClaudePod
npm test
# Bump version in package.json, then:
npm publish
FAQs
Complete development container that sets up Claude Code with modular devcontainer features, modern dev tools, and persistent configurations. Drop it into any project and get a production-ready AI development environment in minutes.
We found that claudepod demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.