
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
opencode-quota
Advanced tools
OpenCode plugin to display subscription quotas for ChatGPT Codex, Google Antigravity, and z.ai
OpenCode plugin that fetches subscription quotas for ChatGPT Codex, Google Antigravity, and z.ai.
/quotas command for all providers/quotas <provider> for a single providerCreate or edit ~/.config/opencode/opencode.json:
{
"$schema": "https://opencode.ai/config.json",
"plugin": ["opencode-quota"]
}
For local development, use a relative path:
{
"plugin": ["./path/to/opencode-quota"]
}
opencode-openai-codex-auth plugin, or ensure openai auth exists in
~/.local/share/opencode/auth.json.~/.opencode/auth/openai.json as a fallback.opencode-antigravity-auth).~/.config/opencode/antigravity-accounts.json.zai or z.ai entry in ~/.local/share/opencode/auth.json with the API key, or
set ZAI_API_KEY./quotas
/quotas codex
/quotas antigravity
/quotas zai
markdown: human-readable summaryjson: provider-specific quota databun install
mise run build
bun test
mise run lint
Tests use vitest with a provider-specific auth configuration system.
Run all tests (mocks only, default):
bun test
Run tests with real auth:
# Edit .env.test and set desired provider(s) to 1
REAL_CODEX_AUTH=1
REAL_ANTIGRAVITY_AUTH=1
REAL_ZAI_AUTH=1
bun test
Run specific provider tests:
bun test src/providers/codex.test.ts
bun test src/providers/antigravity.test.ts
bun test src/providers/zai.test.ts
Test structure:
src/test-helpers.ts - Shared test utilities and fixturessrc/providers/*.test.ts - Provider-specific tests with mocks and real auth.env.test - Auth configuration flags (committed to repo)vitest.config.ts - Test configurationTests are organized into two categories per provider:
.env.test flagsAdding new providers:
src/providers/REAL_NEWPROVIDER_AUTH=0 to .env.testsrc/providers/newprovider.test.ts following existing patternssrc/test-helpers.ts if neededNelson Pires nelsonpires.sn@gmail.com
https://github.com/nelsonPires5/opencode-quota
MIT License. See the LICENSE file for details.
FAQs
OpenCode plugin to display subscription quotas for ChatGPT Codex, Google Antigravity, and z.ai
The npm package opencode-quota receives a total of 93 weekly downloads. As such, opencode-quota popularity was classified as not popular.
We found that opencode-quota demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.