
Research
/Security News
GlassWASM: WebAssembly Malware Found in Trojanized Open VSX Extensions
The trojanized extensions use TinyGo-compiled WebAssembly and Solana transaction memos to resolve command-and-control infrastructure.
@chainstream-io/cli
Advanced tools
ChainStream CLI — on-chain data and DeFi execution for AI agents.
Query tokens, analyze wallets, track markets, and execute swaps across Solana, BSC, and Ethereum.
# Search tokens
npx @chainstream-io/cli token search --keyword PUMP --chain sol
# Get token security
npx @chainstream-io/cli token security --chain sol --address <token_address>
# Check trending tokens
npx @chainstream-io/cli market trending --chain sol --duration 1h
# Wallet PnL
npx @chainstream-io/cli wallet pnl --chain sol --address <wallet_address>
chainstream config set --key apiKey --value <your_api_key>
Get an API key at app.chainstream.io, or via x402 purchase (see below).
# First time: create wallet (no email required)
chainstream login
# With email (optional, for account recovery)
chainstream login user@example.com
# Returning user: fast re-login
chainstream login --key
When CLI encounters a 402 (no subscription), it auto-purchases via x402 and saves the returned API Key to config. After purchase, all subsequent calls use the API Key — no wallet signature needed.
# Just run any command — CLI handles payment automatically
npx @chainstream-io/cli token search --keyword PUMP --chain sol
# → [chainstream] No active subscription. Available plans: ...
# → [chainstream] Purchasing nano plan...
# → [chainstream] Subscription activated. API Key saved to config.
# → { results: [...] }
chainstream wallet set-raw --chain evm
| Command | Description |
|---|---|
token search | Search tokens by keyword |
token info | Get full token detail |
token security | Check honeypot, mint auth, freeze auth |
token holders | Get top token holders |
token candles | Get OHLCV candlestick data |
token pools | Get liquidity pools |
| Command | Description |
|---|---|
market trending | Hot/trending tokens |
market new | Newly created tokens |
market trades | Recent trades |
| Command | Description |
|---|---|
wallet profile | PnL + net worth + top holdings |
wallet pnl | PnL details |
wallet holdings | Token balances |
wallet activity | Transfer history |
wallet address | Show wallet addresses |
wallet balance | Current wallet balance |
| Command | Description |
|---|---|
graphql schema | Discover cubes, fields, and query rules |
graphql query | Execute GraphQL queries (supports x402 auto-payment) |
| Command | Description |
|---|---|
dex quote | Get swap quote |
dex swap | Execute token swap (irreversible) |
dex create | Create token on launchpad |
job status | Check job status |
| Command | Description |
|---|---|
login [email] | Email OTP login (default) |
login --key | P-256 key login (returning users) |
verify | Complete OTP verification |
logout | Clear session |
| Chain | ID | Data API | DeFi |
|---|---|---|---|
| Solana | sol | Yes | Yes |
| BSC | bsc | Yes | Yes |
| Ethereum | eth | Yes | Yes |
Default: formatted JSON. Use --raw for single-line JSON:
chainstream token info --chain sol --address <addr> --raw | jq '.price'
@chainstream-io/cli → @chainstream-io/sdk → ChainStream v2 API
→ TEE (wallet signing)
@chainstream-io/sdk (typed, auto-retry, waitForJob)MIT
FAQs
ChainStream CLI — on-chain data and DeFi execution for AI agents
We found that @chainstream-io/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The trojanized extensions use TinyGo-compiled WebAssembly and Solana transaction memos to resolve command-and-control infrastructure.

Security News
Anthropic says the directive cited national security concerns over a narrow jailbreak, but offered no specific technical details.

Security News
A network of 152 Chrome live wallpaper extensions hid ad tracking and made extension-driven traffic look like Google search clicks.