
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
opencode-bioresearcher-plugin
Advanced tools
OpenCode plugin that adds a Bioresearcher agent.
No nonsense and powerful. An agent that just works for your typical biomedical and pharmaceutical research needs.
Tab to activate the Bioresearcher Agent and starting asking right away.
By default, it will conduct highly detailed and in-depth research, easily surpassing all general purpose LLM applications.
To reduce research depth and make research process faster, start your question with light-research:
light-research Significance of KRAS for cancer?
Based on fantastic work of the BioMCP Team.
Add the plugin to your opencode.json:
{
"$schema": "https://opencode.ai/config.json",
"plugin": [
"@yeyuan98/opencode-bioresearcher-plugin",
],
"mcp": {
"biomcp": {
"type": "local",
"command": ["uv", "run", "--with", "biomcp-python", "biomcp", "run"],
"enabled": true,
"timeout": 120000
}
}
}
BioMCP is absolutely required and might take time to load. You will need to have uv installed on your system too. Refer to BioMCP guide for details.
| Issue | Solution |
|---|---|
| Agent not appearing | Check plugin in opencode.json is typed correctly |
| BioMCP tool failures | Make sure you have BioMCP installed and enabled |
| Research taking a long time | Check whether subagents are generating outputs; could be slow model / API throttle / overcomplicated query / etc. |
CC BY-NC-ND 4.0
FAQs
OpenCode plugin that adds a bioresearcher agent
We found that opencode-bioresearcher-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.