
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
evermem-async
Advanced tools
One-line CLI tool to connect any AI coding agent to EverMemOS long-term memory
一行命令,让任何 AI 编程 CLI 工具接入 EverMemOS 长期记忆系统
One command to connect any AI coding CLI to EverMemOS long-term memory.
| Tool | Log Location | Status |
|---|---|---|
| Claude Code | ~/.claude/projects/**/*.jsonl | ✅ |
| Cursor IDE | ~/.cursor/chats/**/<session>/store.db | ✅ |
| Codex CLI | ~/.codex/sessions/**/rollout-*.jsonl | ✅ |
| Kimi CLI | ~/.kimi/sessions/**/context.jsonl | ✅ |
| Qwen Code | ~/.qwen/ or $QWEN_SHARE_DIR | ✅ |

左上:Dashboard 实时状态 · 右上:Agent 管理 · 左下:配置中心 · 右下:记忆语义搜索
npm install -g evermem-async
evermem setup
evermem start --daemon
curl -fsSL https://raw.githubusercontent.com/nanxingw/EverMem/main/install.sh | bash
evermem setup交互式向导会引导你完成:
evermem-user)evermem setup # 交互式配置向导(首次使用必跑)
evermem start # 前台启动,自动打开 Web UI
evermem start --daemon # 后台静默运行
evermem stop # 停止后台 daemon
evermem status # 查看运行状态和最近同步记录
evermem run # 立即手动同步一次
evermem run --dry-run # 预览将同步的内容,不实际上传
evermem run --agents claude,codex # 只同步指定工具
evermem web # 在浏览器打开 Web 控制台
evermem search --query "React hooks" # 搜索已存储的记忆
evermem search --query "debug" --method vector --top-k 5
evermem install-skill # 重新安装 skill 到所有已检测工具
evermem install-skill --all # 强制安装到所有支持的工具
访问 http://localhost:7349(端口自动检测,被占用时自动切换):
keyword / vector / hybrid / agentic 四种搜索模式Web UI 使用 SSE(Server-Sent Events) 实时推送 daemon 状态,无需手动刷新。
AI Tool Session → JSONL Logs → Extract & Filter → EverMemOS API → Long-term Memory
~/.claude、~/.cursor、~/.codex 等目录)evermem search 或 Web UI 检索历史记忆,供任何会话调用evermem setup 或 evermem install-skill 会自动把两个 skill 安装到所有已检测到的工具:
| Tool | /evermem | /evermem-sync-context |
|---|---|---|
| Claude Code | 自动加载,或 /evermem | /evermem-sync-context |
| Cursor IDE | 自动加载,或 /evermem | /evermem-sync-context |
| Codex CLI | $evermem | — |
| Kimi CLI | /skill:evermem | — |
| Qwen Code | /skills 选择 evermem | — |
每次开新会话都要重新解释项目背景?这个 skill 解决这个问题。
在任意项目目录下运行 /evermem-sync-context,AI 自动完成:
CLAUDE.md、Cursor → .cursorrules、Codex → AGENTS.md,无需手动指定CLAUDE.md 中所有已有内容,只更新 ## Project Context 区块,不会覆盖你手写的设计规范、品牌准则等<!-- last synced: YYYY-MM-DD -->,下次打开 CLAUDE.md 一眼知道上下文新鲜度package.json / pyproject.toml 等读取# 在任意项目目录,开新会话时运行一次
/evermem-sync-context
运行后,CLAUDE.md 会自动追加类似:
## Project Context
<!-- last synced: 2026-03-13 -->
### 开发现状 / Current State
- v0.1.0:CLI + Web UI + Daemon 全链路完成,5 个 AI 工具全部接入
- 技术栈:Node.js ESM + Express + Svelte + SQLite(Cursor)+ EverMemOS API
### 开发历程 / Key Decisions
- Cursor 使用 SQLite store.db,需用 Python3 处理 binary protobuf blob
- skill 安装采用平铺 skills/ 目录,每个 skill 独立子目录,安装器自动扫描
### 未来方向 / Roadmap
- P0: npm publish 发布 v0.1.0
- P1: Kimi / Qwen skill 调用方式验证
配置存储于 ~/.evermem/config.json:
{
"apiKey": "your-evermemos-api-key",
"interval": 30,
"port": 7349,
"agents": ["claude", "cursor", "codex"],
"userId": "evermem-user",
"maxTurnsPerSession": 200
}
| 字段 | 说明 | 默认值 |
|---|---|---|
apiKey | EverMemOS API Key | — |
interval | 自动同步间隔(分钟) | 30 |
port | Web UI 端口(被占用时自动切换) | 7349 |
agents | 启用的工具列表 | [] |
userId | 记忆存储用户 ID | "evermem-user" |
maxTurnsPerSession | 每个会话最多提取的对话轮数 | 200 |
~/.evermem/
├── config.json # 主配置文件
├── daemon.pid # Daemon 进程 ID(运行时存在)
└── logs/
├── runs.jsonl # 每次同步的运行记录
└── daemon.log # Daemon 日志
| Variable | Description |
|---|---|
EVERMEMOS_API_KEY | EverMemOS API Key(优先于配置文件中的 apiKey) |
QWEN_SHARE_DIR | Qwen Code 自定义数据目录(默认 ~/.qwen) |
MIT © nanxingw
FAQs
One-line CLI tool to connect any AI coding agent to EverMemOS long-term memory
The npm package evermem-async receives a total of 4 weekly downloads. As such, evermem-async popularity was classified as not popular.
We found that evermem-async demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.