
Research
Node.js Fixes AsyncLocalStorage Crash Bug That Could Take Down Production Servers
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.
@lit-protocol/aw-tool-sign-eddsa
Advanced tools
The `aw-tool-sign-eddsa` package provides functionality for performing EdDSA signing operations using Lit Protocol's PKPs (Programmable Key Pairs). This tool enables secure signing of arbitrary messages while enforcing policy-based controls.
The aw-tool-sign-eddsa package provides functionality for performing EdDSA signing operations using Lit Protocol's PKPs (Programmable Key Pairs). This tool enables secure signing of arbitrary messages while enforcing policy-based controls.
lit-actions/tool.tsContains the main logic for executing a Lit Action to perform EdDSA signing operations.
lit-actions/policy.tsDefines and validates the EdDSA signing policy.
lit-actions/utils/Collection of utility functions for the signing process:
solana-keypair.ts: Handles Solana keypair creation and managementsign-message.ts: Core message signing functionalityindex.ts: Exports utility functionsThe tool requires the following parameters:
{
pkpEthAddress: string; // PKP's Ethereum address
message: string; // Message to be signed
ciphertext: string; // Encrypted private key data
dataToEncryptHash: string; // Hash of the encrypted data
}
The tool supports policy restrictions on:
Success Response:
{
status: 'success',
signature: string, // Base64-encoded signature
publicKey: string // Base58-encoded public key
}
Error Response:
{
status: 'error',
error: string,
details: {
message: string,
type: string,
stack?: string
}
}
@solana/web3.js: Solana blockchain interaction@lit-protocol/aw-tool: Core Agent Wallet toolingtweetnacl: For Ed25519 signature verificationFAQs
The `aw-tool-sign-eddsa` package provides functionality for performing EdDSA signing operations using Lit Protocol's PKPs (Programmable Key Pairs). This tool enables secure signing of arbitrary messages while enforcing policy-based controls.
We found that @lit-protocol/aw-tool-sign-eddsa demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.