
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@nyosegawa/agent-ui-server
Advanced tools
Node local bridge helpers for Agent UI.
Use this package when a host application needs local WebSocket bridge helpers, upload handling, or one-shot RPC utilities around Codex App Server.
bun add @nyosegawa/agent-ui-server @nyosegawa/agent-ui-core @nyosegawa/agent-ui-codex
| Use case | Import |
|---|---|
| Full-chat WebSocket bridge | import { attachAgentUiWebSocketBridge } from "@nyosegawa/agent-ui-server"; |
| Lower-level upgraded-socket handler | import { handleAgentUiWebSocketConnection } from "@nyosegawa/agent-ui-server"; |
| Local media upload/static helper | import { createAgentUiLocalMediaHelper } from "@nyosegawa/agent-ui-server"; |
| One-shot RPC helpers | import { createAgentUiNextRpcRoute, createAgentUiExpressMiddleware } from "@nyosegawa/agent-ui-server"; |
| Bearer WebSocket subprotocol verification | import { verifyAgentUiBearerSubprotocol } from "@nyosegawa/agent-ui-server"; |
| Raw stdio/process ownership | import { createCodexAppServerBridge } from "@nyosegawa/agent-ui-server/advanced"; |
Use the package root for normal host integration: WebSocket bridges, local
media, one-shot RPC, method policy, server-request policy, dynamic-tool policy,
redaction, and host-event helpers. Use /advanced only when the host
deliberately owns raw stdio process composition.
This package provides bridge helpers. Host applications own process lifecycle, authorization, network exposure, deployment topology, persistence, and resource policy.
Use explicit bridge admission, browser method policy, one-shot method policy, dynamic-tool policy, local media serving, redaction, and host event sinks. Non-loopback bridges, upload/static authorization, tenant/workspace isolation, audit storage, billing, and deployment policy remain host-owned.
See the repository docs for current package exports and integration guidance: https://github.com/nyosegawa/agent-ui
FAQs
Node local bridge helpers for Agent UI.
We found that @nyosegawa/agent-ui-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.