
Research
GemStuffer Campaign Abuses RubyGems as Exfiltration Channel Targeting UK Local Government
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.
@safe-global/api-kit
Advanced tools
SDK that facilitates the interaction with the Safe Transaction Service API
Software development kit that facilitates the interaction with the Safe Transaction Service API, allowing to propose and share transactions with the other signers of a Safe, sending the signatures to the service to collect them, getting information about a Safe (like reading the transaction history, pending transactions, enabled Modules and Guards, etc.), among other features.
Head to the API Kit docs to learn more about how to use this SDK.
Install the package with yarn or npm:
yarn add @safe-global/api-kit
npm install @safe-global/api-kit
import SafeApiKit from '@safe-global/api-kit'
const apiKit = new SafeApiKit({
chainId: 1n,
// Optional. txServiceUrl must be used to set a custom service. For example on chains where Safe doesn't run services.
txServiceUrl: 'https://safe-transaction-mainnet.safe.global'
})
If you have any doubts, questions, or need assistance, feel free to reach out! Here you will find how to get support.
Please read our contribution guidelines before submitting any changes. We appreciate your help! 🙌
This library is released under MIT.
FAQs
SDK that facilitates the interaction with the Safe Transaction Service API
The npm package @safe-global/api-kit receives a total of 52,042 weekly downloads. As such, @safe-global/api-kit popularity was classified as popular.
We found that @safe-global/api-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.

Company News
Socket was named to the Rising in Cyber 2026 list, recognizing 30 private cybersecurity startups selected by CISOs and security executives.

Research
Socket detected 84 compromised TanStack npm package artifacts modified with suspected CI credential-stealing malware.