
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
whale-code
Advanced tools
whale code — local-first AI agent CLI for inventory, orders, and analytics powered by MCP
Local-first AI agent CLI for inventory, orders, analytics, customers, and more — powered by MCP.
npm install -g whale-code
Or use the one-liner:
curl -fsSL https://whaletools.dev/install.sh | sh
whale login # Browser-based OAuth to WhaleTools
whale # Start interactive chat
whale -p "prompt" # Non-interactive (print) mode
Add to ~/.claude/settings.json:
{
"mcpServers": {
"whale": {
"command": "whale"
}
}
}
{
"mcpServers": {
"whale": {
"command": "npx",
"args": ["whale-code"]
}
}
}
Tools are loaded dynamically from the database — no code changes needed when tools are added or updated.
| Tool | Description |
|---|---|
analytics | Sales analytics with flexible date ranges |
inventory | Adjust quantities, set stock, transfer between locations |
inventory_query | Query inventory summary, velocity, by location |
inventory_audit | Start, count, complete inventory audits |
orders | Find orders, get details, purchase orders |
purchase_orders | Create, approve, receive, cancel purchase orders |
transfers | Transfer inventory between locations |
products | Find, create, update products and pricing |
customers | Find, create, update customers |
collections | Manage product collections |
suppliers | Find and list suppliers |
locations | Find store locations |
email | Send emails, manage inbox |
alerts | Low stock and pending order alerts |
documents | Generate COAs and documents |
audit_trail | View audit logs |
whale Start interactive chat
whale -p "prompt" Non-interactive mode
whale login Log in to WhaleTools
whale logout Clear saved session
whale status Show connection status
whale mcp list|add|remove Manage MCP servers
whale doctor Run diagnostics
whale config [key] [value] View/set configuration
whale update Update to latest version
whale help Show help
git clone https://github.com/neowhale/whale-code.git
cd whale-code
npm install
npm run dev
MIT
FAQs
whale code — local-first AI agent CLI for inventory, orders, and analytics powered by MCP
We found that whale-code demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.