
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@txkit/tx-decoder
Advanced tools
Decode raw EVM calldata into PreparedTransaction clearSigning trees. ERC-7730 registry loader, ABI-based fallback decoder. Zero React or wagmi deps.
Decode raw EVM calldata into structured DecodedCall trees compatible with @txkit/tx-protocol clearSigning fields.
v0.1.0-alpha - shape and surface may shift before v1.0.
Takes an EvmCall ({to, data, value}) plus a chain ID, returns a DecodedCall with:
clearSigning rulesLookup order:
abi option (highest priority)(chain, to) (loaded JSON descriptors)fourByte resolver fallbacknpm install @txkit/tx-decoder@alpha @txkit/tx-protocol@alpha viem
import { decodeCall, buildRegistry } from '@txkit/tx-decoder'
const result = await decodeCall(
{
call: { to: '0x...', data: '0xa9059cbb...' },
chain: 'eip155:1',
},
{ abi: erc20Abi },
)
// {
// selector: '0xa9059cbb',
// functionName: 'transfer',
// args: [
// { name: 'to', type: 'address', value: '0x...' },
// { name: 'amount', type: 'uint256', value: 1000000000000000000n },
// ],
// source: 'abi-prop',
// }
The starter registry (BUILTIN_REGISTRY) is empty in v0.1.0-alpha. Targets for the JSON registry data:
Each entry ships as a JSON file under src/registry/data/ with ERC-7730 manifests for clear-signing rules.
Skeleton. Implementation lands progressively as JSON registry entries are populated. The decoder API surface is stable.
FAQs
Decode raw EVM calldata into PreparedTransaction clearSigning trees. ERC-7730 registry loader, ABI-based fallback decoder. Zero React or wagmi deps.
We found that @txkit/tx-decoder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.