
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
A lightweight Linux automation tool for mouse, keyboard, and screenshots. Inspired by Peekaboo.
Peepbo is a lightweight, Node.js + TypeScript automation tool for Linux, inspired by Peekaboo. It allows you to programmatically control your mouse, keyboard, and window focus, as well as capture screenshots, making it ideal for building AI agents that interact with the Linux desktop.
scrot, gnome-screenshot, imagemagick, or gdbus for Wayland).xdotool).Peepbo relies on standard Linux automation tools. You can check for them using the built-in verify command:
peepbo verify
Typically, you will need:
xdotool (for automation)libglib2.0-bin (for gdbus screenshots on GNOME Wayland)scrot or imagemagick (fallback for X11 screenshots)npm install -g peepbo
# Clone the repository
git clone https://github.com/LichAmnesia/peepbo.git
cd peepbo
# Install dependencies
npm install
# Build the project
npm run build
# Link globally (optional)
npm link
You can run Peepbo directly via node:
# Link for global usage (optional)
npm link
# Capture a screenshot
peepbo image --output capture.png
# Click at specific coordinates
peepbo click --x 500 --y 300
# Type text
peepbo type "Hello World"
# Press a key combo
peepbo key "ctrl+c"
# Focus a window
peepbo window focus "Code"
On modern Linux distributions (like Ubuntu 24.04/25.10) using Wayland, you might encounter completely black screenshots. Peepbo handles this via GNOME's D-Bus API, but it requires GNOME to be in "Unsafe Mode" to allow external script interaction.
Enabling Unsafe Mode allows external processes to interact with GNOME Shell internals. This is powerful for automation but bypasses some default security sandboxing.
Alt + F2, type lg, and hit Enter.Enter:
global.context.unsafe_mode = true
Esc to close the console.Note: This setting resets on logout/reboot. If you prefer not to use this, consider switching to an X11 (Xorg) session from the login screen.
# Watch mode for development
npm run build -- --watch
ISC
FAQs
A lightweight Linux automation tool for mouse, keyboard, and screenshots. Inspired by Peekaboo.
We found that peepbo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.