
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@aioproductoscom/react-native
Advanced tools
AIOProductOS analytics for React Native — in-app events, identity, screens, and revenue from a customer's mobile app onto the AIOProductOS spine. Zero dependencies.
AIOProductOS analytics for React Native (and Expo). Capture in-app events, identity, screens, and revenue from your mobile app — they land on the same AIOProductOS spine, joined to the same customer record as your web and server data. Zero dependencies.
npm install @aioproductoscom/react-native
# optional, for identity that survives app restarts:
npm install @react-native-async-storage/async-storage
import AsyncStorage from "@react-native-async-storage/async-storage";
import { ProductOS } from "@aioproductoscom/react-native";
export const pos = new ProductOS({
apiKey: "pk_live_…", // your product (publishable) key, from your AIOProductOS workspace
storage: AsyncStorage, // optional — without it, identity resets per launch
});
pos.identify(user.id, { email: user.email, plan: "scale" });
pos.screen("Dashboard");
pos.capture("report_exported", { format: "pdf" });
pos.revenue(99, "EUR", { plan: "scale" });
pos.reset(); // on logout
Events are queued and flushed in batches automatically — calls never block the
UI thread. Call pos.flush() when the app backgrounds (e.g. from an AppState
listener) to send anything pending.
A customer's mobile app is a capture surface the browser SDK can't reach (no DOM). This sends the same event shape over the same ingest, so funnels, retention, the brain, and your AI teammates reason across web and mobile on one spine.
@aioproductoscom/nodeFAQs
AIOProductOS analytics for React Native — in-app events, identity, screens, and revenue from a customer's mobile app onto the AIOProductOS spine. Zero dependencies.
We found that @aioproductoscom/react-native demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.