
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
create-booboo
Advanced tools
Scaffold a runnable Booboo brain in one command. Zero dependencies, pure stdlib.
npx create-booboo my-brain
cd my-brain
npm install
npm run build # booboo.config.yaml → brain.json (the snapshot)
npm run serve # REST API on http://localhost:8787
npm run mcp # MCP over stdio — point Claude / Cursor / Claude Code at it
npm run view # see your brain in 3D (opens your browser)
booboo.config.yaml — layers, privacy walls, and sources: a JSON starter that works
immediately, plus a commented postgres block to point at your own Postgres/Supabase
(${DATABASE_URL} from the environment).data.booboo.json — a small sample graph (agents / knowledge / memory) to build from.package.json — wired build / serve / mcp / view scripts on @booboo-brain/cli..gitignore — the built snapshot can contain real data, so it's never committed.Pass --force to scaffold into a non-empty directory.
Part of Booboo — the unified operational brain. MIT.
FAQs
Scaffold a new Booboo brain — `npx create-booboo my-brain`. Zero deps.
The npm package create-booboo receives a total of 29 weekly downloads. As such, create-booboo popularity was classified as not popular.
We found that create-booboo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.