
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
Give Claude Code persistent memory, laser-focused context, and an autonomous team of specialists.
The Tailor to Your Threads
Give Claude Code persistent memory, laser-focused context, and an autonomous team of specialists.
Tylor transforms your Claude Code experience from a single-shot terminal interaction into a persistent, intelligent workspace.
Every time you open Claude Code, you normally start from zero. Tylor fixes that. It organizes your work into threads—isolated, named workspaces that survive restarts and reboots. It remembers every decision, every line of code, and every discussion, so you never have to repeat yourself.
No database. No cloud account. No configuration. Just install and go.
Tylor weaves parallel, persistent memory threads and orchestrates specialist sub-agents.
Tylor completely eliminates the "context reset." Shut down your computer, close your terminal, and come back a week later—Claude will pick up exactly where you left off.
Work in parallel without context bleed. Discuss frontend components in a Frontend thread and database schemas in a Backend thread. By isolating context, token usage stays low, and Claude's focus stays incredibly sharp.
You don't need to micromanage. Claude acts as the orchestrator. If you ask it to review architecture, it will dynamically load its cto persona. If you ask it to write a PRD, it natively invokes the bmad skill framework to get the job done.
Tylor is built on a production-hardened ADK-pattern harness. You can register hundreds of domain-specific ECC skills (like ecc/web, ecc/data) via the /add-skill command. Tylor lazy-loads only the tools required for the current prompt, giving you massive capability scaling without ever blowing up Claude's token context window.
Declare a sandbox for your thread and let Claude work autonomously. Assign large, complex tasks and let Claude execute them while you step away from the keyboard.
Monitor your entire workspace through a beautiful, locally hosted web UI. Track active threads, review past conversations, and watch autonomous agent progress in real-time.
Tylor installs seamlessly into your Claude Code, Claude Desktop, GitHub Copilot, Antigravity, or VSCode Claude extension environment. Requires Python 3.8+.
If you have Node.js installed, you can configure Tylor instantly across all your clients without manually cloning the repository. Simply run:
npx tylor-mcp
macOS / Linux / WSL:
git clone https://github.com/GunjanGrunge/tylor ~/.claude/plugins/GunjanGrunge/tylor
python3 ~/.claude/plugins/GunjanGrunge/tylor/install.py
Windows:
git clone https://github.com/GunjanGrunge/tylor %USERPROFILE%\.claude\plugins\GunjanGrunge\tylor
python %USERPROFILE%\.claude\plugins\GunjanGrunge\tylor\install.py
/help-agent101 in your prompt (or use Copilot Chat / /mcp show).Creating your first persistent workflow is incredibly simple:
/new-thread Authentication ← Create a persistent workspace
/run we need to implement JWT based authentication
/new-thread Dashboard UI ← Create an isolated UI thread
/run build a react dashboard with a sidebar
/switch-thread Authentication ← Instantly switch context back to Auth
/run add refresh token logic
/list-threads ← View your workspace status
/open-threads-ui ← Launch the visual dashboard
Tylor exposes a suite of powerful commands directly within Claude:
| Command | Description |
|---|---|
/new-thread <name> | Create a named thread and seamlessly switch future work into it. |
/switch-thread <name> | Switch context to an existing thread (fuzzy matching supported). |
/list-threads | Show all available threads alongside their status and activity. |
/kill-thread <name> | Close a thread and dispatch asynchronous summarization. |
/recall | Search through the deep semantic memory of your active thread. |
/add-skill | Install a new skill package dynamically. |
/open-threads-ui | Open the live, local thread visualizer UI in your browser. |
/set-sandbox <path> | Declare specific filesystem roots for secure, autonomous execution. |
/afk-status | Get real-time progress reports on current autonomous background tasks. |
Pro Tip: You can also use shorthand aliases like
CT <name>to create a thread orSwThread <name>to switch.
Tylor now includes a default, plugin-wide security gate powered by Bumblebee. When a risky command is detected—especially package installs, extension installs, skill/package additions, or MCP config changes—Tylor will initiate a read-only Bumblebee scan before the command runs.
pip install, npm install, editor/extension installs, or skill/config setup.Suggested responses from the gate include:
BUMBLEBEE_PATH if the CLI is not found.bumblebee scan --json manually before retrying.BUMBLEBEE_ENABLED=false only if you understand the risk.This layer applies across the plugin, regardless of which thread or persona is active.
Tylor comes pre-equipped with specialist sub-agents. Claude will automatically invoke these personas based on the nature of your query—no manual intervention required.
cto: System architecture, tradeoffs, platform strategy, and engineering standards.code_agent: Senior software engineer laser-focused on shipping robust code and tests.analyst: Market research, data synthesis, and technical decision support.ceo: Product strategy, roadmap prioritization, and stakeholder framing.This project is licensed under the MIT License. See the LICENSE file for details.
Tylor — Tailoring the future of AI development.
FAQs
Give Claude Code persistent memory, laser-focused context, and an autonomous team of specialists.
The npm package tylor-mcp receives a total of 15 weekly downloads. As such, tylor-mcp popularity was classified as not popular.
We found that tylor-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.