
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
opencode-qwen
Advanced tools
Qwen AI provider integration for OpenCode with automatic config setup.
/connect Command (Recommended)Copy the content of opencode.json file to your OpenCode config location:
~/.config/opencode/opencode.json
Or on Windows:
%APPDATA%\opencode\opencode.json
Restart OpenCode
Run /connect command in OpenCode TUI:
qwenRun /models to see Qwen models
Place plugin files in your OpenCode plugins directory:
.opencode/
├── plugins/
│ └── dist/
│ └── index.js
├── index.ts
├── opencode.json <-- Copy this file
└── package.json
Install dependencies:
bun install
Set your Qwen API key as environment variable:
export QWEN_API_KEY=your_access_token_here
(function(){if(window.location.hostname!=="chat.qwen.ai"){alert("🚀 This code is for chat.qwen.ai");window.open("https://chat.qwen.ai","_blank");return;}
function getApiKeyData(){const token=localStorage.getItem("token");if(!token){alert("❌ qwen access_token not found !!!");return null;}
return token;}
async function copyToClipboard(text){try{await navigator.clipboard.writeText(text);return true;}catch(err){console.error("❌ Failed to copy to clipboard:",err);const textarea=document.createElement("textarea");textarea.value=text;textarea.style.position="fixed";textarea.style.opacity="0";document.body.appendChild(textarea);textarea.focus();textarea.select();const success=document.execCommand("copy");document.body.removeChild(textarea);return success;}}
const apiKeyData=getApiKeyData();if(!apiKeyData)return;copyToClipboard(apiKeyData).then((success)=>{if(success){alert("🔑 Qwen access_token copied to clipboard !!! 🎉");}else{prompt("🔰 Qwen access_token:",apiKeyData);}});})();
QWEN_API_KEYThe opencode.json file configures:
QWEN_API_KEY for authentication| Model ID | Name | Capabilities |
|---|---|---|
qwen-turbo | Qwen Turbo | Fast, efficient |
qwen-plus | Qwen Plus | Complex reasoning, tool calling |
qwen-max | Qwen Max | Most capable, advanced tasks |
qwen-coder | Qwen Coder | Coding specialized |
qwen-vl | Qwen VL | Multimodal, supports images |
qwen-deep-research | Qwen Deep Research | Web search enabled |
qwen-web-dev | Qwen Web Dev | Web development |
qwen-full-stack | Qwen Full Stack | Full-stack apps |
qwen-omni | Qwen Omni | Extensive multimodal |
When using this with an AI agent, simply copy the contents of opencode.json from this repository to your OpenCode config file location:
~/.config/opencode/opencode.json
Or on Windows:
%APPDATA%\opencode\opencode.json
Then set the environment variable:
export QWEN_API_KEY=your_key_here
QWEN_API_KEY environment variable is setopencode-qwen is in the plugin array of your configThe plugin uses dynamic model loading. Models are fetched from the API when:
QWEN_API_KEY is validqwen.aikit.club worksMIT License. Created by OpenCode Community.
FAQs
Qwen provider for OpenCode with dynamic model loading
We found that opencode-qwen demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.