
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@roxyon/deploy-core
Advanced tools
Shared deploy pipeline for Roxyon tooling — project detection, archiving, and the build/upload/poll orchestration used by @roxyon/cli and @roxyon/mcp.
The shared deploy pipeline behind @roxyon/cli
and @roxyon/mcp: project-type
detection, deterministic archiving, and the build → upload → poll orchestration.
You normally use the CLI or the MCP server, not this directly.
npm i @roxyon/deploy-core
import { Roxyon } from '@roxyon/api-client';
import { deployProject } from '@roxyon/deploy-core';
const outcome = await deployProject({
cwd: process.cwd(),
roxyon: new Roxyon({ sessionToken: process.env.ROXYON_TOKEN }),
reporter: { step: console.log, log: console.log },
});
deployProject() — reads roxyon.json, builds if configured, packs (minus
.roxyonignore / .gitignore), uploads, and for app runtimes polls until the
deploy is live or failed. The console creates the application on the first
deploy.detectRuntime() / buildProjectConfig() — for roxyon initpackDirectory() / buildIgnore() / listFiles() — the archiverloadProjectConfig() / saveProjectConfig() — roxyon.jsonloadCredentials() / saveCredentials() — ~/.roxyon/config.jsonMIT · part of roxyon-devtools
FAQs
Shared deploy pipeline for Roxyon tooling — project detection, archiving, and the build/upload/poll orchestration used by @roxyon/cli and @roxyon/mcp.
The npm package @roxyon/deploy-core receives a total of 8 weekly downloads. As such, @roxyon/deploy-core popularity was classified as not popular.
We found that @roxyon/deploy-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.