
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
opencode-ddev
Advanced tools
DDEV Plugin for OpenCode - Automatically detects DDEV availability and wraps bash commands to execute inside the DDEV container.
ddev describe -j for structured JSON outputddev exec for container executionddev_logs tool for retrieving logs from DDEV servicesAdd this plugin to your OpenCode configuration as a Git submodule:
# Add the submodule
git submodule add git@github.com:JUVOJustin/opencode-ddev-plugin.git plugin/ddev
# Create an index.js file in the plugin root directory
echo 'export { DDEVPlugin } from "./ddev/ddev.js";' > plugin/index.js
# Commit the changes
git add .gitmodules plugin/ddev plugin/index.js
git commit -m "Add DDEV plugin as submodule"
To load plugins from the plugin subfolder, ensure your OpenCode configuration includes the plugin directory. The plugin will be automatically discovered and loaded.
Once installed, the plugin will:
Example commands that will be automatically wrapped:
ls -la → ddev exec --dir="/var/www/html" bash -c "ls -la"npm install → ddev exec --dir="/var/www/html" bash -c "npm install"Bash tool commands that run on host (not wrapped):
gitghdockerddevThe plugin provides custom tools that are registered when a DDEV project is detected:
ddev_logs ToolRetrieve logs from DDEV services for debugging and monitoring.
Arguments:
service (optional): Service to get logs from (e.g., 'web', 'db'). Defaults to 'web'.follow (optional): Follow logs in real-time (stream as they appear). Cannot be used with tail.tail (optional): Number of lines to show from the end of logs. Defaults to 50 lines if not specified. Mutually exclusive with follow.time (optional): Add timestamps to log output.Default Behavior:
follow nor tail is specified, returns the last 50 lines to prevent context pollution.Examples:
// Get last 50 lines from web service (default)
ddev_logs()
// Get last 100 lines from database service
ddev_logs({ service: "db", tail: 100 })
// Follow web service logs in real-time with timestamps
ddev_logs({ follow: true, time: true })
FAQs
Adds context about ddev setup and improves command calling
The npm package opencode-ddev receives a total of 10 weekly downloads. As such, opencode-ddev popularity was classified as not popular.
We found that opencode-ddev demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.