
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@profullstack/sh1pt
Advanced tools
One codebase → every store, registry, CDN, and channel. Build. Promote. Scale. Iterate.
Build. Promote. Scale. Iterate…
One codebase → every store, registry, CDN, and channel. Ads on every network. Cloud infra on demand. AI agents tighten the loop. sh1pt is the single command between an idea and global distribution.
🌐 Homepage: https://sh1pt.com 📦 Source: https://github.com/profullstack/sh1pt
curl -fsSL https://sh1pt.com/install.sh | sh
Or pick your own runtime:
pnpm add -g @profullstack/sh1pt # or
bun install -g @profullstack/sh1pt # or
npm install -g @profullstack/sh1pt # or
deno install -g -A -f -n sh1pt npm:@profullstack/sh1pt
Runs on Node 22+, Bun 1.1+, Deno 2.0+.
sh1pt build # compile artifacts for every target you configured
sh1pt promote # publish (ship), run ads, print swag, pitch investors
sh1pt scale # provision cloud infra, DNS round-robin, rollouts, cost ceilings
sh1pt iterate # observe metrics → agent proposes diffs → ship → measure, on loop
Every packages/<category>/<name>/ in the sh1pt monorepo is a CLI command:
sh1pt bots discord setup # set up the Discord bot adapter
sh1pt social x setup # X (Twitter) organic posting
sh1pt webhooks slack setup # Slack incoming webhook
sh1pt cloud runpod setup # RunPod GPU instances
sh1pt payments stripe setup # Stripe checkout
sh1pt targets pkg-npm setup # npm publish target
sh1pt vcs github setup # GitHub releases / PRs
# … and ~170 more across 17 categories …
Every adapter's setup command:
~/.config/sh1pt/config.json under adapters.<id>List everything in a category:
sh1pt social list
sh1pt bots list
sh1pt targets list
mkdir my-app && cd my-app
sh1pt config stack set # prompts: node / bun / python / rust
sh1pt ship init # scaffolds sh1pt.config.ts
# declare targets in sh1pt.config.ts …
sh1pt promote ship --channel beta # build + lint + submit everywhere
MIT
FAQs
One codebase → every store, registry, CDN, and channel. Build. Promote. Scale. Iterate.
The npm package @profullstack/sh1pt receives a total of 146 weekly downloads. As such, @profullstack/sh1pt popularity was classified as not popular.
We found that @profullstack/sh1pt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.