
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@txtcel/protocol
Advanced tools
TypeScript SDK for the Txtcel Solana program: instruction builders, account codecs and PDA derivation.
TypeScript SDK for the Txtcel Solana program — a thin, framework-agnostic wrapper around the on-chain protocol. It gives you:
build*Instruction(...) for every program instruction.derive*Pda(...) helpers that mirror the program's seeds.load* helpers that fetch + decode in one call.No React, no wallet adapter — just @solana/web3.js primitives, so it works in
the browser, in Node scripts and in tests.
npm install @txtcel/protocol @solana/web3.js
@solana/web3.js (v1) is a peer dependency — install it in your app.
import { Connection, PublicKey } from '@solana/web3.js'
import {
deriveSettingsPda,
loadProgramSettings,
buildSendMessageTransactions,
} from '@txtcel/protocol'
const connection = new Connection('https://api.mainnet-beta.solana.com')
const programId = new PublicKey('<YOUR_PROGRAM_ID>')
// Derive a PDA
const settingsPda = deriveSettingsPda(programId)
// Load + decode an account in one call
const settings = await loadProgramSettings(connection, programId)
// Build instruction(s) for a higher-level action
const txs = await buildSendMessageTransactions(/* ...args */)
All builders take the programId explicitly — the SDK has no hard-coded address,
so the same package works across clusters and deployments.
npm install
npm run build # tsup -> dist (ESM + CJS + .d.ts)
npm run typecheck
npm run build
npm publish # publishConfig.access is already "public"
FAQs
TypeScript SDK for the Txtcel Solana program: instruction builders, account codecs and PDA derivation.
The npm package @txtcel/protocol receives a total of 13 weekly downloads. As such, @txtcel/protocol popularity was classified as not popular.
We found that @txtcel/protocol demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.