
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
pi-cc-patch
Advanced tools
Use your Pro/Max subscription billing with pi instead of getting the "Third-party apps now draw from your extra usage" error.
The API classifier detects pi as a third-party app and blocks subscription billing. This extension patches the request payload to bypass it:
Version 1.0.2 advertises Claude Code 2.1.261 in the subscription billing block. Anthropic currently requires at least 2.1.251 for Claude Fable 5.1; older identities fail with claude_code_version_too_old.
Scope: this patch runs only for direct Anthropic OAuth requests, identified by Pi's OAuth-only Claude Code identity block. Anthropic API-key, Amazon Bedrock, OpenRouter, gateway, and other provider requests are left unchanged.
No token swap, no SDK dependency, no proxy. Just a before_provider_request hook. Pi's built-in provider handles everything else — caching, token refresh, thinking, streaming, tool mapping.
pi install git:github.com/picassio/pi-cc-patch
Then restart pi. Use /login if you haven't already.
pi remove git:github.com/picassio/pi-cc-patch
FAQs
Use Claude Pro/Max subscription with pi — bypasses third-party app detection
The npm package pi-cc-patch receives a total of 12 weekly downloads. As such, pi-cc-patch popularity was classified as not popular.
We found that pi-cc-patch demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.