
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@sidebutton/core
Advanced tools
Core workflow engine for SideButton - YAML-based browser and shell automation.
npm install @sidebutton/core
This package provides the core workflow engine used by SideButton:
{{variable}} syntax for dynamic valuesimport { parseWorkflow, executeWorkflow } from '@sidebutton/core';
// Parse a workflow from YAML
const workflow = parseWorkflow(`
id: hello_world
title: Hello World
steps:
- type: shell.run
cmd: echo "Hello from SideButton!"
`);
// Execute the workflow
const result = await executeWorkflow(workflow, context);
| Category | Steps |
|---|---|
| Browser | navigate, click, type, scroll, hover, wait, extract, extractAll, exists, key |
| Shell | shell.run, terminal.open, terminal.run |
| LLM | llm.classify, llm.generate |
| Control | control.if, control.retry, control.stop, workflow.call |
| Data | data.first |
@sidebutton/server - MCP server with REST API and dashboardApache-2.0
FAQs

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.