
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
getaimeter
Advanced tools
Track AI coding costs across Claude, Cursor, Codex, Copilot, and Gemini. MCP server, billing blocks, optimization recommendations.
Track your Claude AI token usage across every surface — CLI, VS Code, Desktop App — in one dashboard.

Anthropic doesn't show per-session or per-project token usage. If you use Claude Code across multiple tools, you have no idea where your tokens are going.
AIMeter watches Claude's transcript files locally, extracts token counts, and sends them to your dashboard at getaimeter.com. No proxy, no code changes, no config files.
npx aimeter setup
The wizard will:
That's it. Use Claude normally — your dashboard updates in real time.
| Source | How |
|---|---|
| Claude Code CLI | File watcher on ~/.claude/projects/ |
| VS Code Extension | File watcher on ~/.claude/projects/ |
| Desktop App (Agent Mode) | File watcher on local-agent-mode sessions |
| claude.ai (Web/Desktop Chat) | Browser extension (optional) |
Only token counts are sent — no prompts, no responses, no code. Your conversations stay on your machine.
aimeter setup Full onboarding wizard (recommended)
aimeter status Check configuration and service status
aimeter watch Run watcher in foreground (for testing)
aimeter install Install as background service
aimeter uninstall Remove background service
aimeter start Start the background service
aimeter stop Stop the background service
aimeter logs Tail the watcher log
aimeter key Print your API key
Claude Code (CLI, VS Code, Desktop Agent Mode) writes JSONL transcript files with full token usage data. AIMeter watches these files using fs.watch, reads only new bytes via offset tracking, and POSTs token counts to your dashboard.
AIMeter sends only:
claude-sonnet-4-20250514)It never sends your prompts, responses, code, or file contents.
MIT
FAQs
Track AI coding costs across Claude, Cursor, Codex, Copilot, and Gemini. MCP server, billing blocks, optimization recommendations.
The npm package getaimeter receives a total of 5 weekly downloads. As such, getaimeter popularity was classified as not popular.
We found that getaimeter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.