
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
opencode-codebuddy-internal-auth
Advanced tools
OpenCode plugin for CodeBuddy Internal (Claude Code Internal) OAuth authentication
为 OpenCode 提供 CodeBuddy Internal (Claude Code Internal) 的 OAuth 认证支持。
将整个 opencode-codebuddy-internal-auth 目录复制到:
# 项目级插件
cp -r opencode-codebuddy-internal-auth /path/to/your/project/.opencode/plugins/
# 或全局插件
cp -r opencode-codebuddy-internal-auth ~/.config/opencode/plugins/
cd opencode-codebuddy-internal-auth
npm publish
opencode.json 中配置:{
"$schema": "https://opencode.ai/config.json",
"plugin": ["opencode-codebuddy-internal-auth"]
}
在 opencode.json 中添加 provider 配置:
{
"$schema": "https://opencode.ai/config.json",
"plugin": ["opencode-codebuddy-internal-auth"],
"provider": {
"codebuddy-internal": {
"npm": "@ai-sdk/anthropic",
"name": "CodeBuddy Internal",
"models": {
"claude-sonnet-4.5": {
"name": "Claude Sonnet 4.5",
"contextLength": 200000
},
"claude-opus-4.5": {
"name": "Claude Opus 4.5",
"contextLength": 200000
},
"glm-4.7": {
"name": "GLM-4.7 (Haiku)",
"contextLength": 128000
}
}
}
},
"model": {
"default": "codebuddy-internal/claude-sonnet-4.5"
}
}
codebuddy-internal provider| 模型 ID | 名称 | 说明 |
|---|---|---|
claude-sonnet-4.5 | Claude Sonnet 4.5 | 非敏感仓库可用,有额度限制 |
claude-opus-4.5 | Claude Opus 4.5 | 非敏感仓库可用,额度消耗更快 |
glm-4.7 | GLM-4.7 / DeepSeek | 无限制 |
注意: API Key 模式只能使用 GLM-4.7,要使用 Claude 模型必须通过 OAuth 认证!
| 用途 | 端点 |
|---|---|
| Device Code 请求 | https://copilot.code.woa.com/api/v2/auth/device/code |
| Device Token 轮询 | https://copilot.code.woa.com/api/v2/auth/device/token |
| Token 刷新 | https://copilot.code.woa.com/api/v2/auth/oauth_token/refresh |
| Gateway | https://copilot.code.woa.com/server/chat/codebuddy-gateway/codebuddy-code |
插件会自动注入以下 Headers:
x-api-key: {accessToken}
x-conversation-id: {uuid}
x-app-version: 1.0.2
x-app-name: codebuddy-code
x-request-platform: CodeBuddy-Code
x-scene-name: common_chat
user-agent: Claude-Code-Internal/1.0.2
x-request-platform-v2: Claude-Code-Internal
x-app-name-v2: claude-code-internal
x-claude-code-internal: true
x-channel: claude-code-internal
# 安装依赖
bun install
# 类型检查
bun run typecheck
MIT
FAQs
OpenCode plugin for CodeBuddy Internal (Claude Code Internal) OAuth authentication
We found that opencode-codebuddy-internal-auth demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.