
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
opencode-python-docs
Advanced tools
OpenCode plugin for Python documentation lookup via DevDocs.
Add to ~/.config/opencode/opencode.json:
{ "plugin": ["opencode-python-docs"] }
python_docsSearch Python documentation index.
| Argument | Type | Description |
|---|---|---|
query | string | Search query (e.g., 'asyncio', 'pathlib') |
version | string? | Python version (default: 3.14) |
type | string? | Filter by doc type |
limit | number? | Max results (default: 20) |
Example:
python_docs query="asyncio" version="3.12"
fetch_python_docFetch full documentation as Markdown.
| Argument | Type | Description |
|---|---|---|
path | string | Doc path from search results |
version | string? | Python version (default: 3.14) |
anchor | string? | Jump to specific section by anchor ID |
offset | number? | Character offset for pagination (default: 0) |
limit | number? | Max characters to return (default: 12000) |
Example:
fetch_python_doc path="library/asyncio"
Pagination example:
# First chunk
fetch_python_doc path="library/asyncio" offset=0 limit=5000
# Continue reading
fetch_python_doc path="library/asyncio" offset=5000 limit=5000
~/.cache/opencode/python-docs/git clone https://github.com/yriveiro/opencode-python-docs
cd opencode-python-docs
bun install
bun run build
| Command | Description |
|---|---|
bun run build | Build the plugin |
bun run typecheck | Run TypeScript type checking |
bun run test | Run tests |
bun run format | Format code with Biome |
bun run lint | Run Biome linter |
bun run check | Run all checks (lint + format) |
MIT
FAQs
OpenCode plugin for Python documentation lookup via DevDocs
The npm package opencode-python-docs receives a total of 1 weekly downloads. As such, opencode-python-docs popularity was classified as not popular.
We found that opencode-python-docs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.