Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
By Sarah Gooding - Sep 18, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
spendbar
Per-project Claude Code + Codex spend tracking — CLI, MCP server, and native macOS menubar. Placeholder release; v0.1 in active development.
spendbar
Per-project Claude Code + Codex spend tracking — one npm install -g delivering a CLI, an
MCP server, and a native macOS menubar item with your live spend.
This is a placeholder release reserving the package name. v0.1 is in active development.
What's coming:
spendbar— per-project / per-day cost views combining Claude Code and Codex spend, with reconciliation checks against the underlying usage dataspendbar mcp— an MCP server so your agent can answer "what did I spend this week per project"- A native macOS menubar item (a ~112 KB helper, not an Electron app) showing today's spend live
No lifecycle scripts, no telemetry, local data only.
FAQs
Per-project Claude Code + Codex spend tracking, grouped by project and model family.
The npm package spendbar receives a total of 5 weekly downloads. As such, spendbar popularity was classified as not popular.
We found that spendbar demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 31 Jul 2026
Related posts
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
By Karlo Zanki - Sep 17, 2026
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
By Sarah Gooding - Sep 16, 2026