
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@sapiom/cli
Advanced tools
The Sapiom command-line interface — scaffold, validate, and ship Sapiom agents.
The Sapiom command-line interface.
npm install -g @sapiom/cli
# or run without installing:
npx @sapiom/cli <command>
Launch a local coding environment with MCP pre-wired and your agent running in an embedded terminal:
sapiom dev [dir] # open the harness in the current (or given) directory
sapiom dev --port 4200 # use a custom port
sapiom dev --no-open # skip opening the browser automatically
sapiom dev requires @sapiom/harness to be installed. Install it once with:
npm install -g @sapiom/harness
sapiom agents init my-app # scaffold a new agent project
sapiom agents check # validate locally (bundle, manifest, graph)
sapiom agents deploy # build and ship
Run a deployed agent on a schedule — recurring (cron) or once at a set time:
sapiom agents schedule preview "0 9 * * 1-5" # check a cron before using it
sapiom agents schedule create my-app --cron "0 9 * * 1-5" --timezone America/New_York
sapiom agents schedule create my-app --at 2026-07-01T17:00:00Z # one-off
sapiom agents schedule list my-app # list an agent's schedules
sapiom agents schedule inspect <scheduleId> # config, next fire, recent fires
sapiom agents schedule cancel <scheduleId>
Run sapiom agents --help for the full command set. Every command accepts
--json for machine-readable output.
The CLI can emit anonymous usage events through
@sapiom/analytics-core:
one command.run event per executed command, carrying the command name, the
names of the flags used (never their values or arguments), the duration, and
the exit status. Nothing is currently sent anywhere. When delivery is
enabled, it is best-effort and can never fail a command: it never slows
command execution, and on exit a final flush is bounded by the emitter's
5-second request timeout — retries never hold the process open. Opt out at
any time with SAPIOM_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1.
FAQs
The Sapiom command-line interface — scaffold, validate, and ship Sapiom agents.
The npm package @sapiom/cli receives a total of 410 weekly downloads. As such, @sapiom/cli popularity was classified as not popular.
We found that @sapiom/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.