
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@punchme/backend-client
Advanced tools
Pasos para regenerar la libreria backend-client (en apps/lins/backend-client)
Asegurarse estar en node v22.18.0 (nvm use 22.18.0)
Asegurarse de agregar todos los resolvers a RESOLVERS en apps/cloud/src/configuration.ts
Regenerar el schema en apps/cloud/schema.graphql 3.1 Ejecutar el app de next cd apps/cloud npm run dev 3.2 Entrar 1 vez en el browser a https://localhost:3000/api/schema No tiene que descargarlo, solo con entrar a la ruta sobreescribe localmente el schema en apps/cloud/schema.graphql Una vez hecho ésto pueden pasar al paso siguiente
Entrar en la terminal a apps/libs/backend-client
cd apps/libs/backend-client
Loggearse a npm con su token de npm
npm login --auth-type=legacy
Si les pide: email: daniel@kwantec.com user: kwantec password:
Asegurarse de hacer npm install en apps/libs/backend-client
Actualizar el numero de build al siguiente qualifier en
apps/libs/backend-client/package.json
Ejemplo: 1.0.0-dev.6 --> 1.0.0-dev.7
(pueden ver cual es el ultimo publicado con npm view @punchme/backend-client )
o tag personal, Ejemplo 1.0.0-dev-daniel.0
Ejecutar el compilador de typescript "tsc" cd apps/libs/backend-client/ tsc
Publicar npm publish --tag dev
o tag personal
Ejemplo: npm publish --tag dev-daniel
FAQs
Client library for PunchMe backend
The npm package @punchme/backend-client receives a total of 0 weekly downloads. As such, @punchme/backend-client popularity was classified as not popular.
We found that @punchme/backend-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.