
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
Native macOS menubar app for AI-powered text editing. Select text anywhere, press a shortcut, and Eddy improves it using OpenAI.

npx eddy-app
Or download directly from Releases.
| Action | Shortcut | Description |
|---|---|---|
| Grammar | Cmd+Shift+G | Fix spelling and grammar |
| Improve | Cmd+Shift+I | Enhance clarity and readability |
| Expand | Cmd+Shift+E | Make text longer with more detail |
| Shorten | Cmd+Shift+S | Condense text |
| Formal | Cmd+Shift+F | Professional tone |
| Casual | Cmd+Shift+C | Friendly, relaxed tone |
| Markdown | Cmd+Shift+M | Convert to Markdown |
| Vision | Cmd+Shift+V | Analyze screenshot and suggest reply |
If you have both Xcode and Command Line Tools installed, ensure Xcode is the active developer directory:
sudo xcode-select -s /Applications/Xcode.app/Contents/Developer
eddy-app/
├── Eddy.xcodeproj/ # Xcode project
├── Eddy/ # Source code
│ ├── EddyApp.swift # Main entry point & AppDelegate
│ ├── Info.plist # App configuration
│ ├── Eddy.entitlements # Permissions
│ ├── Models/ # Data models
│ ├── Services/ # Core services (OpenAI, Clipboard, etc.)
│ ├── Views/ # SwiftUI views
│ ├── Windows/ # Window controllers
│ └── Resources/
│ ├── Assets.xcassets/ # Icons
│ └── Prompts/ # Action prompts
├── bin/cli.js # NPM installer CLI
└── package.json # NPM package config
From Xcode:
Eddy.xcodeprojCmd+R to build and runFrom Terminal:
# Build
xcodebuild -project Eddy.xcodeproj -scheme Eddy -configuration Debug build
# Run
open ~/Library/Developer/Xcode/DerivedData/Eddy-*/Build/Products/Debug/Eddy.app
# Stop
pkill -x Eddy
# View logs
log stream --predicate 'process == "Eddy"' --level debug
Create a .md file in Eddy/Resources/Prompts/:
---
id: myaction
label: My Action
description: What this action does
action: Processing
shortcut: CommandOrControl+Shift+X
icon: icon-name
order: 9
type: text
---
Your system prompt here.
For screenshot-based actions, use type: screenshot.
MIT
FAQs
AI-powered text editing from your macOS menubar
We found that eddy-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.