
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
CLI for Kyma API — one endpoint, 21 open-source models.
npm install -g kyma-api
Or use directly:
npx kyma-api
# Authenticate
kyma-api login
# Chat with the best model
kyma-api chat "What is Rust?"
# Pick a specific model
kyma-api chat -m deepseek-v3 "Explain transformers"
# Interactive mode
kyma-api chat
# Pipe mode
echo "Summarize this" | kyma-api chat
| Command | Description |
|---|---|
kyma-api login | Authenticate (device code flow or API key) |
kyma-api chat <prompt> | Stream a chat response |
kyma-api models | List available models |
kyma-api balance | Show credit balance and tier |
kyma-api keys | Manage API keys |
kyma-api status | Account overview |
# Device code flow (opens browser)
kyma-api login
# Direct API key
kyma-api login --api-key kyma-xxxx
# Environment variable
export KYMA_API_KEY=kyma-xxxx
kyma-api chat "hello"
# JSON output
kyma-api models --json
# Quiet (no banners)
kyma-api chat --quiet "hello"
# Auto-detected when piped
echo "hello" | kyma-api chat
FAQs
CLI for Kyma API — one endpoint, 21 models
We found that kyma-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.