
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
> **Looking for the fuzzy coding agent?** See **[packages/coding-agent](packages/coding-agent)** for installation and usage.
Looking for the fuzzy coding agent? See packages/coding-agent for installation and usage.
Tools for building AI agents and managing LLM deployments.
| Package | Description |
|---|---|
| @fuzzyos/fuzzy-ai | Unified multi-provider LLM API (OpenAI, Anthropic, Google, etc.) |
| @fuzzyos/fuzzy-agent-core | Agent runtime with tool calling and state management |
| @fuzzyos/fuzzy-coding-agent | Interactive coding agent CLI |
| @fuzzyos/fuzzy-mom | Slack bot that delegates messages to the fuzzy coding agent |
| @fuzzyos/fuzzy-tui | Terminal UI library with differential rendering |
| @fuzzyos/fuzzy-web-ui | Web components for AI chat interfaces |
| @fuzzyos/fuzzy-pods | CLI for managing vLLM deployments on GPU pods |
See CONTRIBUTING.md for contribution guidelines and AGENTS.md for project-specific rules (for both humans and agents).
npm install # Install all dependencies
npm run build # Build all packages
npm run check # Lint, format, and type check
./test.sh # Run tests (skips LLM-dependent tests without API keys)
./fuzzy-test.sh # Run fuzzy from sources (must be run from repo root)
Note:
npm run checkrequiresnpm run buildto be run first. The web-ui package usestscwhich needs compiled.d.tsfiles from dependencies.
MIT
FAQs
> **Looking for the fuzzy coding agent?** See **[packages/coding-agent](packages/coding-agent)** for installation and usage.
The npm package fuzzy-os receives a total of 0 weekly downloads. As such, fuzzy-os popularity was classified as not popular.
We found that fuzzy-os demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.