
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@lastest/runner
Advanced tools
Remote test execution runner for Lastest2 visual regression testing platform
Remote test execution runner for Lastest2 — free, open-source visual regression testing with AI-generated tests.
Connects to your Lastest2 server, receives test jobs, executes them locally using Playwright, and reports results back. Run as a background daemon or in the foreground for CI/CD.
# Global installation
npm install -g @lastest/runner
# Or run directly with npx
npx @lastest/runner --help
After installing, you need to install Playwright's Chromium browser:
npx playwright install chromium
The runner will verify Chromium is installed on startup and provide clear instructions if it's missing.
lastest2-runner start -t YOUR_TOKEN -s https://your-lastest2-server
That's it. The runner connects, waits for jobs, and executes tests automatically.
lastest2-runner start -t <token> -s <server-url>
Spawns a detached background process. Logs are written to ~/.lastest2/runner.log.
| Option | Description | Default |
|---|---|---|
-t, --token <token> | Runner authentication token (required on first run) | — |
-s, --server <url> | Lastest2 server URL (required on first run) | — |
-i, --interval <ms> | Poll interval in milliseconds | 5000 |
-b, --base-url <url> | Override target URL for test execution | — |
After the first run, options are saved to ~/.lastest2/runner.config.json. Subsequent runs can omit them:
lastest2-runner start # Uses saved config
lastest2-runner stop
lastest2-runner status
lastest2-runner log # Show last 50 lines
lastest2-runner log -n 100 # Show last 100 lines
lastest2-runner log -f # Follow log output (like tail -f)
lastest2-runner run -t <token> -s <server-url>
Keeps the process attached to the terminal. Useful for:
Runner stores its files in ~/.lastest2/:
| File | Purpose |
|---|---|
runner.pid | Process ID of running daemon |
runner.log | Log output |
runner.config.json | Saved configuration (token encrypted with AES-256-CBC) |
jobs:
visual-tests:
runs-on: ubuntu-latest
steps:
- name: Run Lastest2 Runner
run: |
npx @lastest/runner run \
-t ${{ secrets.LASTEST2_TOKEN }} \
-s ${{ vars.LASTEST2_SERVER }}
FROM node:18-slim
RUN npm install -g @lastest/runner && \
npx playwright install chromium --with-deps
CMD ["lastest2-runner", "run", "-t", "$TOKEN", "-s", "$SERVER"]
For zero-config CI/CD without installing the runner, use the reusable GitHub Action instead:
- name: Run visual regression tests
uses: dexilion-team/lastest2/action@main
with:
server-url: ${{ secrets.LASTEST_SERVER_URL }}
runner-token: ${{ secrets.LASTEST_RUNNER_TOKEN }}
# Install globally
npm install -g @lastest/runner
# Install Playwright Chromium
npx playwright install chromium
# Start the runner
lastest2-runner start -t lastest_runner_abc123 -s https://lastest2.example.com
# Check it's running
lastest2-runner status
# Runner Status: RUNNING
# PID: 12345
# Server: https://lastest2.example.com
# View logs
lastest2-runner log -f
# Stop when done
lastest2-runner stop
The runner can also be used as a library:
import { RunnerClient, TestRunner } from '@lastest/runner';
const client = new RunnerClient({
token: 'your-token',
serverUrl: 'https://your-lastest2-server',
pollInterval: 5000,
});
await client.start();
Run:
npx playwright install chromium
On Linux, you may also need system dependencies:
npx playwright install-deps chromium
-i 10000 (10 seconds)lastest2-runner log -fFSL-1.1-ALv2 — see LICENSE
FAQs
CI client for the Lastest visual regression testing platform — triggers builds and reports results
The npm package @lastest/runner receives a total of 13 weekly downloads. As such, @lastest/runner popularity was classified as not popular.
We found that @lastest/runner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.