
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@tsrx/oxc-linux-arm64-gnu
Advanced tools
OXC for TSRX native binaries and parser addon for aarch64-unknown-linux-gnu
This is a platform-specific implementation package for
@tsrx/oxc. There are eight of them,
one per supported target, named @tsrx/oxc-<platform>, and @tsrx/oxc lists
all eight as
optionalDependencies. Your package manager installs only the one matching
your operating system, CPU, and C library, so a normal install downloads one
prebuilt binary rather than eight.
You should not add this package to your own package.json. Depend on
@tsrx/oxc and let resolution pick the platform package for you. Install it by
hand only if a package manager has been configured to skip optional
dependencies. The package has no install script and does not download or
compile anything after installation.
bin/oxc-tsrx is one Rust-native executable that carries the linter, the
formatter, and the language server together. It selects a tool from a leading
subcommand: none or lint to lint, fmt to format, lsp to serve an editor.
It also dispatches on the name it was invoked under, so a copy or link named
oxc-tsrx-fmt or oxc-tsrx-lsp runs that tool directly.
One executable rather than three matters for download size. Three separate binaries linked the same OXC engines three times; the merged one is a little over half the bytes.
Schema-2 releases also contain parser.node, the canonical Node-API parser
addon. @tsrx/oxc loads it for its @tsrx/oxc/parser export.
checksums.json records, for every executable and addon in the package, its
SHA-256 digest, byte size, object identity, Rust target, package version,
API/ABI role, Node-API version, capabilities, and the exact official OXC
revision it was built against.
FAQs
OXC for TSRX native binaries and parser addon for aarch64-unknown-linux-gnu
The npm package @tsrx/oxc-linux-arm64-gnu receives a total of 374 weekly downloads. As such, @tsrx/oxc-linux-arm64-gnu popularity was classified as not popular.
We found that @tsrx/oxc-linux-arm64-gnu demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.