
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@sebspark/retry
Advanced tools
@sebspark/retryA helper for retrying any promise call (ex an http request) with error rules and backoff
import { retry, interval, retryCondition, RetrySettings } from '@sebspark/retry'
import axios from 'axios'
const settings: RetrySettings = {
interval: interval.exponential(1000), // Exponential backoff starting at 1000 ms
maxRetries: 5,
maxDelay: 5000, // Cap each retry wait to at most 5000 ms
retryCondition: retryCondition.serverErrors, // Only retries on server errors
}
const result = await retry(() => axios.get('https://example.com'), settings)
maxDelaymaxDelay is optional. When set, it caps the computed delay for each retry attempt.
maxDelay: waits exactly interval(retryCount)maxDelay: waits Math.min(interval(retryCount), maxDelay)Example with exponential backoff:
interval.exponential(1000) produces: 1000, 2000, 4000, 8000, ...maxDelay: 5000 actual waits become: 1000, 2000, 4000, 5000, ...FAQs
Unknown package
The npm package @sebspark/retry receives a total of 405 weekly downloads. As such, @sebspark/retry popularity was classified as not popular.
We found that @sebspark/retry demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.