
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@naviprotocol/uikit
Advanced tools
ack# @naviprotocol/uikit
NAVI Protocol UI component library for Sui blockchain applications.
pnpm add @naviprotocol/uikit
import { ConnectWalletProvider, ConnectModal } from 'sui-wallets-connect';
import {
createNetworkConfig,
SuiClientProvider,
WalletProvider,
} from "@mysten/dapp-kit";
<ConnectWalletProvider>
<SuiClientProvider>
<WalletProvider>
<ConnectModal trigger={null} open={true} onOpenChange={(isOpen) => {}} />
</WalletProvider>
</SuiClientProvider>
</ConnectWalletProvider>
:root {
--navi-connect-modal-background: #191919; // background color
--navi-connect-modal-text: #0d0d0d; // text color
--navi-connect-modal-primary-color: #FF782F; // primary color
--navi-connect-modal-btn-text-color: #000000; // button text color
--navi-connect-modal-dot-color: #0DC3A4; // dot color
}
import { transactionPreviewService } from '@naviprotocol/uikit';
useEffect(() => {
transactionPreviewService.showTransactionPreview({
transactionBlock: sampleTransaction.transaction,
sender: sampleTransaction.sender,
onConfirm: () => {
console.log('✅ Transaction confirmed by user')
},
onCancel: () => {
console.log('❌ Transaction cancelled by user')
}
})
}, [])
ConnectModal - Wallet connection modalConnectWalletProvider - Context provideruseConnectWallets - Wallet management hookTransactionPreview - Transaction preview componentTransactionPreviewModal - Transaction preview modaluseTransactionPreview - Transaction preview hooktransactionPreviewService - Transaction preview service# Install dependencies
pnpm install
# Start development server
pnpm run start
# Build package
pnpm run build
# Start Storybook
pnpm run storybook
MIT
FAQs

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.