
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
@fedify/nuxt
Advanced tools
This package provides a simple way to integrate Fedify with Nuxt.
Supported framework versions:
deno add jsr:@fedify/nuxt
# or
npm add @fedify/nuxt
# or
pnpm add @fedify/nuxt
# or
yarn add @fedify/nuxt
# or
bun add @fedify/nuxt
Create your Federation instance in server/federation.ts:
import { createFederation, MemoryKvStore } from "@fedify/fedify";
const federation = createFederation({
kv: new MemoryKvStore(),
});
// ... configure your federation ...
export default federation;
Then enable the Nuxt module in nuxt.config.ts:
export default defineNuxtConfig({
modules: ["@fedify/nuxt"],
});
By default, @fedify/nuxt loads your Federation instance from
#server/federation.
If your project uses a different file path or context data factory, configure the module options:
export default defineNuxtConfig({
modules: ["@fedify/nuxt"],
fedify: {
federationModule: "#server/federation",
contextDataFactoryModule: "#server/fedify-context",
},
});
The context data factory module should export either:
contextDataFactory named exportwith this signature:
import type { ContextDataFactory } from "@fedify/nuxt";
const contextDataFactory: ContextDataFactory<unknown> = async (event, request) => {
return {
ip: event.node.req.socket.remoteAddress,
method: request.method,
};
};
export default contextDataFactory;
FAQs
Integrate Fedify with Nuxt
The npm package @fedify/nuxt receives a total of 2,823 weekly downloads. As such, @fedify/nuxt popularity was classified as popular.
We found that @fedify/nuxt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.