
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@tempus1/x402-attest
Advanced tools
Drop-in attestation wrapper for x402 payment clients. Tamper-evident receipts for every paid call, verifiable by anyone.
Drop-in attestation wrapper for x402 payment clients. Every paid call produces a tamper-evident receipt that a third party can verify without trusting the agent, the seller, or Rubric.
+ import { withAttestation } from '@tempus1/x402-attest';
+ const fetchAndPay = withAttestation(baseX402Fetch, { subjectId: 'agent-alpha' });
- const res = await baseX402Fetch(url, init);
+ const res = await fetchAndPay(url, init);
Zero runtime dependencies. Node >= 20.11.
npx @tempus1/x402-attest verify ./receipt.json # exit 0 = valid
Full documentation, a worked receipt, and an honest account of what a receipt does and does not prove: root README.
FAQs
Drop-in attestation wrapper for x402 payment clients. Tamper-evident receipts for every paid call, verifiable by anyone.
We found that @tempus1/x402-attest demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.