
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
@getpara/paramedic
Advanced tools
Para SDK diagnostic and troubleshooting CLI tool. Quickly identify common integration issues in your Para SDK project.
npx @getpara/paramedic
Run in any directory containing a Para SDK project to get instant diagnostics.
npx @getpara/paramedic
npx @getpara/paramedic ./my-para-app
npx @getpara/paramedic --help
Paramedic runs the following checks on your project:
| Check | Description |
|---|---|
| API Key | Verifies NEXT_PUBLIC_PARA_API_KEY or equivalent is configured and not a placeholder |
| CSS Import | Ensures Para SDK styles are imported in your application |
| ParaProvider | Validates ParaProvider component is properly set up |
| QueryClientProvider | Checks React Query provider wrapping (required for Para SDK) |
| Version Consistency | Detects mismatched versions across Para packages |
| Chain Dependencies | Validates network-specific dependencies (EVM, Solana, Cosmos) |
| "use client" Directive | Ensures proper client directive for Next.js App Router |
| Environment Variable Prefix | Checks correct env var prefix for your framework |
| Deprecated Packages | Warns about deprecated Para packages that should be upgraded |
┌ Paramedic - Para SDK Diagnostics
│
◇ Analysis complete
│
│ Framework: Next.js (App Router)
│ SDK: @getpara/react-sdk@2.5.0
│
◇ Checks complete
│
│ ✓ API key configured
│ ✓ CSS styles imported
│ ✓ ParaProvider found
│ ✗ QueryClientProvider missing
│ └─ Wrap your app with QueryClientProvider from @tanstack/react-query
│ ⚠ Version mismatch
│ └─ @getpara/react-sdk@2.5.0 and @getpara/evm-wallet-connectors@2.4.0
│
└ 2 issues found (1 error, 1 warning)
@getpara/react-sdk@getpara/react-sdk-litepackage.json to identify framework and Para SDK version.gitignore| Code | Description |
|---|---|
0 | All checks passed |
1 | One or more checks failed (errors found) |
Paramedic uses a modular check system. Each check is a standalone module in src/checks/ that implements the Check interface:
interface Check {
id: string;
name: string;
category: CheckCategory;
run: (context: DiagnosticContext) => Promise<CheckResult>;
}
MIT
FAQs
Para SDK diagnostic and troubleshooting CLI tool
The npm package @getpara/paramedic receives a total of 133 weekly downloads. As such, @getpara/paramedic popularity was classified as not popular.
We found that @getpara/paramedic demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.