
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@synchronity/sdk
Advanced tools
TypeScript SDK for Synchronity — AI commerce infrastructure that lets AI assistants autonomously browse, compare, and purchase products.
npm install @synchronity/sdk
import { Synchronity } from '@synchronity/sdk';
const client = new Synchronity({
agentToken: 'your-agent-token',
// baseUrl is optional — defaults to https://api.synchronity.app
baseUrl: 'https://api.synchronity.app',
});
// Search for products
const results = await client.searchProducts({
site_id: 'my-store',
query: 'wireless headphones',
limit: 10,
});
// Add to cart
const cart = await client.createCart({ site_id: 'my-store' });
await client.addToCart({
site_id: 'my-store',
cart_id: cart.id,
variant_id: results.products[0].variants[0].id,
quantity: 1,
});
// Checkout
const order = await client.executeCheckout({
site_id: 'my-store',
cart_id: cart.id,
shipping_address: { ... },
payment_method: { ... },
});
Register your agent to get a token:
curl -X POST https://api.synchronity.app/v1/auth/agents/register \
-H "Content-Type: application/json" \
-d '{
"name": "my-agent",
"scopes": ["read_products", "manage_cart", "execute_checkout", "read_orders"]
}'
| Method | Description |
|---|---|
searchProducts(params) | Search products across a site |
getProduct(params) | Get product details by ID |
compareProducts(params) | Compare products across sites |
createCart(params) | Create a new cart |
getCart(params) | Get cart contents |
addToCart(params) | Add item to cart |
removeFromCart(params) | Remove item from cart |
applyCoupon(params) | Apply a discount coupon |
executeCheckout(params) | Execute checkout |
getOrder(params) | Get order by ID |
listOrders(params) | List orders |
import { anthropicTools, openaiTools } from '@synchronity/sdk/tools';
// Anthropic (Claude)
const tools = anthropicTools(client);
// OpenAI / LangChain
const tools = openaiTools(client);
FAQs
TypeScript SDK for the Synchronity agentic commerce infrastructure
The npm package @synchronity/sdk receives a total of 9 weekly downloads. As such, @synchronity/sdk popularity was classified as not popular.
We found that @synchronity/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.