
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@ramarivera/pi-langfuse
Advanced tools
Pi extension that exports model usage and tool activity to Langfuse via OpenTelemetry
Pi extension that exports full Pi session traces, tool activity, token usage, and costs to Langfuse via OpenTelemetry.
By default it sends OTLP traces to:
https://langfuse.ai.roxasroot.net/otel/v1/traces
Override with PI_LANGFUSE_OTLP_ENDPOINT when testing against another collector.
pi install npm:@ramarivera/pi-langfuse@0.1.0
This checkout is live-enabled for Pi through:
.pi/extensions/langfuse/index.ts
That shim imports the package entrypoint in src/index.ts, which imports the extension factory from src/extension.ts. Tests use the same symbol so local behavior, package behavior, and manual Pi behavior do not drift.
npm install
npm run check
npm test
npm run test:e2e
npm pack --dry-run
Publishing uses GitHub Actions trusted publishing in .github/workflows/publish.yml.
Before the first publish, configure npm trusted publishing:
ramarivera/pi-langfuse.github/workflows/publish.ymlNo NPM_TOKEN is required for trusted publishing.
FAQs
Pi extension that exports model usage and tool activity to Langfuse via OpenTelemetry
The npm package @ramarivera/pi-langfuse receives a total of 1 weekly downloads. As such, @ramarivera/pi-langfuse popularity was classified as not popular.
We found that @ramarivera/pi-langfuse demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.