
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@cortexkit/aft-bridge
Advanced tools
Shared NDJSON bridge transport, binary resolution, and ONNX runtime helpers for AFT agent-host plugins (OpenCode, Pi)
Shared NDJSON transport, binary resolution, and ONNX runtime helpers used by AFT agent-host plugins (OpenCode, Pi, and future MCP-based hosts).
This package is not intended for direct end-user consumption — it powers
@cortexkit/aft-opencode
and @cortexkit/aft-pi.
BinaryBridge (one persistent aft child process), BridgePool
(one bridge per canonical project root), wire envelope and push-frame types.Host-specific behaviour stays in the plugin packages:
ctx.ask() and prompt rendering belong to the host SDK).Released in lock-step with @cortexkit/aft-opencode and @cortexkit/aft-pi.
The bridge protocol is versioned end-to-end: a plugin running an older bridge
package will detect a newer aft binary and refuse to talk to it.
FAQs
Shared NDJSON bridge transport, binary resolution, and ONNX runtime helpers for AFT agent-host plugins (OpenCode, Pi)
The npm package @cortexkit/aft-bridge receives a total of 3,159 weekly downloads. As such, @cortexkit/aft-bridge popularity was classified as popular.
We found that @cortexkit/aft-bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.