
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@agentkit-js/kernel-pyodide
Advanced tools
CPython-in-WASM kernel (Pyodide) — run real Python code from agents on Node, Bun, and CF Workers.
Part of agentkit-js — a TypeScript + WASM agent runtime.
npm install @agentkit-js/kernel-pyodide @agentkit-js/core pyodide
import { PyodideKernel } from "@agentkit-js/kernel-pyodide";
const kernel = new PyodideKernel();
const result = await kernel.run(`import math; print(math.gcd(2024, 56))`);
console.log(result.logs); // ["8"]
⚠️ Memory budget on edge runtimes — Pyodide's WASM image and Python heap together are ~50–80 MB resident. Cloudflare Workers' free tier (~128 MB) leaves only thin headroom for user code; for memory-heavy workloads use
kernel-wasmtimeorkernel-remotemicroVMs.
See the kernel decision tree.
Apache-2.0 — © agentkit-js contributors
FAQs
PyodideKernel — CPython-in-WASM kernel for agentkit-js
The npm package @agentkit-js/kernel-pyodide receives a total of 1 weekly downloads. As such, @agentkit-js/kernel-pyodide popularity was classified as not popular.
We found that @agentkit-js/kernel-pyodide demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.