
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@virtuoso.dev/reactive-engine-query
Advanced tools
Reactive data fetching with queries and mutations for the Virtuoso reactive engine.
@virtuoso.dev/reactive-engine-query adds data fetching to @virtuoso.dev/reactive-engine-core. Queries and mutations are reactive nodes: parameters flow in, and pending/success/error results flow out to the rest of the graph.
npm install @virtuoso.dev/reactive-engine-core @virtuoso.dev/reactive-engine-query
import { Query } from '@virtuoso.dev/reactive-engine-query'
interface Task {
id: string
title: string
}
export const tasksQuery = Query<{ listId: string }, Task[]>({
queryFn: async ({ listId }, signal) => {
const res = await fetch(`/api/tasks?listId=${listId}`, { signal })
if (!res.ok) {
throw new Error('Failed to fetch tasks')
}
return res.json()
},
initialParams: { listId: '' },
})
Query - parameterized async reads with abort signal support, retries, and typed pending/success/error resultsMutation - async writes with typed idle/pending/success/error resultsexecuteWithRetry / defaultRetryDelay - retry utilities used by bothMIT
FAQs
Reactive data fetching with queries and mutations for the Virtuoso reactive engine.
The npm package @virtuoso.dev/reactive-engine-query receives a total of 309 weekly downloads. As such, @virtuoso.dev/reactive-engine-query popularity was classified as not popular.
We found that @virtuoso.dev/reactive-engine-query demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.