
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@bun-win32/core
Advanced tools
Shared base class, runtime extensions, and fundamental Win32 types for @bun-win32 packages.
Shared base class, runtime extensions, and fundamental Win32 types for @bun-win32 packages.
@bun-win32/core provides the foundation that all @bun-win32 DLL packages build on:
Win32 base class — Abstract class that handles lazy dlopen loading and symbol memoization. Every DLL package (kernel32, user32, etc.) extends this class..ptr getter on all ArrayBuffer, Buffer, DataView, and typed array prototypes, giving direct access to native pointers for Bun FFI calls.HANDLE, DWORD, LPVOID, BOOL, etc.) that map Win32 C types to their TypeScript equivalents.bun add @bun-win32/core
You typically do not need to install this directly — it is pulled in as a dependency of each DLL package.
[!NOTE] AI agents: see
AI.mdfor the package contract and runtime behavior. It explains how@bun-win32/corediffers from the DLL binding packages.
Win32 for a new DLLimport { FFIType, type FFIFunction } from 'bun:ffi';
import { Win32 } from '@bun-win32/core';
class MyDll extends Win32 {
protected static override name = 'mydll.dll';
protected static override readonly Symbols = {
MyFunction: { args: [FFIType.u32], returns: FFIType.i32 },
} as const satisfies Record<string, FFIFunction>;
public static MyFunction(value: number): number {
return MyDll.Load('MyFunction')(value);
}
}
import '@bun-win32/core';
const buffer = new Uint8Array([1, 2, 3]);
nativeFunction(buffer.ptr, buffer.length);
import type { DWORD, HANDLE, BOOL } from '@bun-win32/core';
@bun-win32 DLL packages.FAQs
Shared base class, runtime extensions, and fundamental Win32 types for @bun-win32 packages.
The npm package @bun-win32/core receives a total of 259 weekly downloads. As such, @bun-win32/core popularity was classified as not popular.
We found that @bun-win32/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.