
Research
/Security News
5 Malicious Rust Crates Posed as Time Utilities to Exfiltrate .env Files
Published late February to early March 2026, these crates impersonate timeapi.io and POST .env secrets to a threat actor-controlled lookalike domain.
clean-my-mac-cli
Advanced tools
Free & Open Source alternative to CleanMyMac
Scan and remove junk files, caches, logs, and more β all from your terminal.
npx clean-my-mac-cli
That's it! No installation needed. The CLI will:
$ npx clean-my-mac-cli
π§Ή Clean My Mac
ββββββββββββββββββββββββββββββββββββββββββββββββββββββ
Scanning your Mac for cleanable files...
Found 44.8 GB that can be cleaned:
? Select categories to clean (space to toggle, enter to confirm):
β π’ Trash 2.1 GB (45 items)
β π’ Browser Cache 1.5 GB (3 items)
β π’ Temporary Files 549.2 MB (622 items)
β π‘ User Cache Files 15.5 GB (118 items)
β π‘ Development Cache 21.9 GB (14 items)
Summary:
Items to delete: 802
Space to free: 41.5 GB
? Proceed with cleaning? (Y/n)
β Cleaning Complete!
ββββββββββββββββββββββββββββββββββββββββββββββββββββββ
Trash β 2.1 GB freed
Browser Cache β 1.5 GB freed
Temporary Files β 549.2 MB freed
User Cache Files β 15.5 GB freed
Development Cache β 21.9 GB freed
ββββββββββββββββββββββββββββββββββββββββββββββββββββββ
π Freed 41.5 GB of disk space!
Cleaned 802 items
| Feature | Description |
|---|---|
| π One Command | Just run npx clean-my-mac-cli β no complex flags |
| π― Interactive | Select exactly what you want to clean with checkboxes |
| π‘οΈ Safe by Default | Risky items hidden unless you use --risky |
| π Smart Scanning | Finds caches, logs, dev files, browser data, and more |
| π± App Uninstaller | Remove apps completely with all associated files |
| π§ Maintenance | Flush DNS cache, free purgeable space |
| π Privacy First | 100% offline β no data ever leaves your machine |
| π¦ Minimal Dependencies | Only 5 runtime deps, all from trusted maintainers |
| Category | What it cleans |
|---|---|
trash | Files in the Trash bin |
temp-files | Temporary files in /tmp and /var/folders |
browser-cache | Chrome, Safari, Firefox, Arc cache |
homebrew | Homebrew download cache |
docker | Unused Docker images, containers, volumes |
| Category | What it cleans |
|---|---|
system-cache | Application caches in ~/Library/Caches |
system-logs | System and application logs |
dev-cache | npm, yarn, pip, Xcode DerivedData, CocoaPods |
node-modules | Orphaned node_modules in old projects |
--risky flag)| Category | What it cleans |
|---|---|
downloads | Downloads older than 30 days |
ios-backups | iPhone and iPad backup files |
mail-attachments | Downloaded email attachments |
duplicates | Duplicate files (keeps newest) |
large-files | Files larger than 500MB |
language-files | Unused language localizations |
# Interactive mode β scan, select, and clean
npx clean-my-mac-cli
# Include risky categories
npx clean-my-mac-cli --risky
Remove applications completely with all their preferences, caches, and support files:
npx clean-my-mac-cli uninstall
# Flush DNS cache (may require sudo)
npx clean-my-mac-cli maintenance --dns
# Free purgeable space
npx clean-my-mac-cli maintenance --purgeable
# List all available categories
npx clean-my-mac-cli categories
# Manage configuration
npx clean-my-mac-cli config --init
npx clean-my-mac-cli config --show
# Manage backups
npx clean-my-mac-cli backup --list
npx clean-my-mac-cli backup --clean
If you use this tool frequently:
npm install -g clean-my-mac-cli
clean-my-mac-cli
| β Open Source | All code publicly available for audit |
| β No Network | Operates 100% offline |
| β Minimal Deps | Only 5 runtime dependencies |
| β CI/CD | Every release tested with TypeScript, ESLint, and automated tests |
| β Socket.dev | Dependencies monitored for supply chain attacks |
Found a vulnerability? Report it via GitHub Security Advisories.
git clone https://github.com/guhcostan/clean-my-mac.git
cd clean-my-mac
npm install
npm run dev # Run in dev mode
npm test # Run tests
npm run lint # Run linter
npm run build # Build for production
Contributions are welcome! Please feel free to submit a Pull Request.
git checkout -b feature/amazing-feature)git commit -m 'Add some amazing feature')git push origin feature/amazing-feature)MIT License β see LICENSE for details.
β οΈ Disclaimer
This tool deletes files from your system. While we've implemented safety measures, always ensure you have backups of important data.
Made with β€οΈ by developers who were tired of paying $90 for CleanMyMac
FAQs
Open source CLI tool to clean your Mac - similar to CleanMyMac
We found that clean-my-mac-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Published late February to early March 2026, these crates impersonate timeapi.io and POST .env secrets to a threat actor-controlled lookalike domain.

Security News
A recent burst of security disclosures in the OpenClaw project is drawing attention to how vulnerability information flows across advisory and CVE systems.

Research
/Security News
Mixed-script homoglyphs and a lookalike domain mimic imTokenβs import flow to capture mnemonics and private keys.