
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@roxyon/api-client
Advanced tools
Typed client for the Roxyon BaaS (RX engine) and the Roxyon Applications deploy API.
Typed TypeScript client for the Roxyon BaaS (the RX engine) and the Roxyon
console's deploy endpoints. Plain fetch, no browser dependency — works in Node,
the edge, and the browser.
npm i @roxyon/api-client
import { Roxyon } from '@roxyon/api-client';
// A session token from `roxyon login`, or a roxp_ personal access token.
const roxyon = new Roxyon({ sessionToken: process.env.ROXYON_TOKEN });
const ctx = await roxyon.account.context(); // user + subscriptions + domains
const apps = await roxyon.account.apps();
const logs = await roxyon.applications.logs(apps[0].id, 100);
auth — /Auth/* login (email+password, OTP step-up), me, logoutaccount — context() (user + subs + domains), apps(), getApp()applications — uploadSource() (deploy), deploy/restart, logs,
getEnv/setEnv, repoConnect (git push-to-deploy)sites — static-site publishtokens — personal access token create / list / revokeRUNTIMES, rxError, parseEnv/formatEnv, toQueryStringroxp_… token authenticates the console endpoints (Authorization: Bearer); it is not a BaaS session token — resolve identity and subscriptions
through account.context().error field rather than
rejecting. The write helpers here check for it and throw RoxyonApiError.MIT · part of roxyon-devtools
FAQs
Typed client for the Roxyon BaaS (RX engine) and the Roxyon Applications deploy API.
The npm package @roxyon/api-client receives a total of 9 weekly downloads. As such, @roxyon/api-client popularity was classified as not popular.
We found that @roxyon/api-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.