
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@paraport/sdk
Advanced tools
UI layer for seamless integration of ParaPort cross-chain teleportation functionality.
pnpm add @paraport/sdk polkadot-api
ParaPort SDK requires polkadot-api in your application. Install it as a peer dependency:
# Required peer dependency
pnpm add polkadot-api
@paraport/static, @paraport/core, and @paraport/vue firstpnpm --filter @paraport/static buildpnpm --filter @paraport/core buildpnpm --filter @paraport/vue buildpnpm --filter @paraport/sdk buildTopological order across packages:
@paraport/static → @paraport/core → @paraport/vue → @paraport/sdk → @paraport/reactSee TESTING.md for end-to-end build and test flow.
import '@paraport/sdk/style'
import * as paraport from '@paraport/sdk'
import { connectInjectedExtension } from 'polkadot-api/pjs-signer'
const main = async () => {
// Required signer (polkadot-api compatible)
const getSigner = async () => {
const ext = await connectInjectedExtension('talisman', 'Your App')
const account = ext.getAccounts()[0]
return account.polkadotSigner
}
paraport.init({
integratedTargetId: 'root',
address: USER_ADDRESS,
amount: '10000000000', // 1 DOT
chain: 'AssetHubPolkadot',
asset: 'DOT',
getSigner,
label: 'Mint',
logLevel: 'DEBUG',
onReady: (session) => {
console.log('🚀 ParaPort ready!', session)
},
onSubmit: ({ autoteleport, completed }) => {
console.log('📦 Submit button pressed')
console.log('💥 Autoteleport: ', autoteleport)
console.log('✅ Completed: ', completed)
},
onCompleted: () => {
console.log('✅ Auto-teleport successfully completed!')
},
onAddFunds: () => {
console.log('💰 Add funds button pressed')
},
})
}
main()
import '@paraport/sdk/style'
import * as paraport from '@paraport/sdk'
paraport.init({
integratedTargetId: 'root',
address: USER_ADDRESS,
amount: '10000000000',
chain: 'AssetHubPolkadot',
asset: 'DOT',
endpoints: {
AssetHubPolkadot: ['wss://statemint.api.onfinality.io/public-ws'],
Polkadot: ['wss://polkadot-rpc.publicnode.com']
},
})
You can customize the UI via CSS variables or per instance:
.paraport in your app stylesheet using cascade layers.appearance (map of CSS variables) and themeMode to init.paraport.init({
integratedTargetId: 'root',
// ...required params
appearance: { '--radius': '12px', '--accent-blue': '#4f46e5' },
themeMode: 'auto', // 'light' | 'dark' | 'auto'
})
| Property | Type | Description |
|---|---|---|
| integratedTargetId | string | DOM element ID for component mounting |
| address | string | User's address |
| amount | string | Amount to be teleported |
| chain | string | Chain to be teleported to |
| chains | string[] | Optional list of allowed chains to scope routing/UX |
| asset | string | Asset to be teleported |
| endpoints | Record<string, string[]> | Optional RPC endpoints per chain to override defaults |
| getSigner | () => Promise | Required function returning a polkadot-api signer |
| label | string | Button display text |
| logLevel | string | Log level for debugging (e.g., 'DEBUG') |
| onSubmit | Function | Callback on form submission with { autoteleport, completed } parameters |
| onCompleted | Function | Callback on successful teleport |
| onReady | Function | Callback when UI is ready for interaction |
| onAddFunds | Function | Callback when user clicks to add funds |
MIT
FAQs
ParaPort Embedded UI
We found that @paraport/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.