
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
getremoteapp
Advanced tools
Code on the go — control AI coding agents from your mobile device.
Free. Open source. Code anywhere.
npm install -g getremoteapp
From a repo checkout:
# repository root
yarn cli --help
# package directory
yarn cli --help
remote
This will:
remote gemini
Start a Gemini CLI session with remote control capabilities.
First time setup:
# Authenticate with Google
remote connect gemini
remote – Start Claude Code session (default)remote gemini – Start Gemini CLI sessionremote codex – Start Codex moderemote acp – Start a generic ACP-compatible agentremote auth – Manage authenticationremote connect – Store AI vendor API keys in Remote cloudremote sandbox – Configure sandbox runtime restrictionsremote notify – Send a push notification to your devicesremote daemon – Manage background serviceremote doctor – System diagnostics & troubleshootingremote connect gemini # Authenticate with Google for Gemini
remote connect claude # Authenticate with Anthropic
remote connect codex # Authenticate with OpenAI
remote connect status # Show connection status for all vendors
remote gemini # Start Gemini session
remote gemini model set <model> # Set default model
remote gemini model get # Show current model
remote gemini project set <id> # Set Google Cloud Project ID (for Workspace accounts)
remote gemini project get # Show current Google Cloud Project ID
Available models: gemini-2.5-pro, gemini-2.5-flash, gemini-2.5-flash-lite
remote acp gemini # Run built-in Gemini ACP command
remote acp opencode # Run built-in OpenCode ACP command
remote acp opencode --verbose # Include raw backend/envelope logs
remote acp -- custom-agent --flag # Run any ACP-compatible command directly
remote sandbox configure # Interactive sandbox setup wizard
remote sandbox status # Show current sandbox configuration
remote sandbox disable # Disable sandboxing
-m, --model <model> - Claude model to use (default: sonnet)-p, --permission-mode <mode> - Permission mode: auto, default, or plan--claude-env KEY=VALUE - Set environment variable for Claude Code--claude-arg ARG - Pass additional argument to Claude CLI-h, --help - Show help-v, --version - Show version--no-sandbox - Disable sandbox for the current Claude/Codex runREMOTE_SERVER_URL - Custom server URL (default: https://mobile-code-remote-control-production.up.railway.app)REMOTE_WEBAPP_URL - Custom web app URL (default: https://app.getremote.dev)REMOTE_HOME_DIR - Custom home directory for Remote data (default: ~/.remote)REMOTE_DISABLE_CAFFEINATE - Disable macOS sleep prevention (set to true, 1, or yes)REMOTE_EXPERIMENTAL - Enable experimental features (set to true, 1, or yes)GEMINI_MODEL - Override default Gemini modelGOOGLE_CLOUD_PROJECT - Google Cloud Project ID (required for Workspace accounts)Personal Gmail accounts work out of the box:
remote connect gemini
remote gemini
Google Workspace (organization) accounts require a Google Cloud Project:
remote gemini project set your-project-id
Or use environment variable:
GOOGLE_CLOUD_PROJECT=your-project-id remote gemini
Guide: https://goo.gle/gemini-cli-auth-docs#workspace-gca
Interested in contributing? See CONTRIBUTING.md for development setup and guidelines.
claude command available in PATH)npm install -g @google/gemini-cli)remote connect geminiMIT
FAQs
Mobile remote control for Claude Code, Codex, and Gemini CLI
We found that getremoteapp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.