
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@xyo-network/sdk-protocol
Advanced tools
Foundation SDK facade for XYO Protocol 2.0 (re-exports @xyo-network/sdk-protocol-core)
Foundation SDK thin facade for XYO Protocol 2.0 — protocol, core payload plugins, manifest, and sdk-utils.
@xyo-network/sdk-protocol is a thin compatibility facade over
@xyo-network/sdk-protocol-core. Its dist/ contains pure package re-exports;
the two hash worker bundles are copied byte-for-byte from the core package.
Shared externals (ethers, @ariestools/sdk, zod, etc.) remain
peerDependencies.
Import the whole SDK:
import { ObjectHasher } from '@xyo-network/sdk-protocol'
...or a foundation package via subpath export:
import { PayloadPlugins } from '@xyo-network/sdk-protocol/core-payload-plugins'
import { Api } from '@xyo-network/sdk-protocol/sdk-utils'
import { PayloadSchema } from '@xyo-network/sdk-protocol/payload-model'
Compilation is handled by the @ariestools/toolchain monolith facade mode
configured in xy.config.ts. The facade modules mirror the core
package's public module manifest, with export-parity tests preventing drift.
Workspace dependency ordering builds the core package before the facade copies
its worker outputs:
pnpm xy build # builds the core package and facade
pnpm xy build @xyo-network/sdk-protocol # builds the facade from current core dist
Consumers can import from @xyo-network/sdk-protocol, one of its subpaths, or the
individual @xyo-network/* foundation packages directly.
Using npm:
npm install @xyo-network/sdk-protocol
Using yarn:
yarn add @xyo-network/sdk-protocol
Using pnpm:
pnpm add @xyo-network/sdk-protocol
Using bun:
bun add @xyo-network/sdk-protocol
See the LICENSE file for license rights and limitations (LGPL-3.0-only).
FAQs
Foundation SDK facade for XYO Protocol 2.0 (re-exports @xyo-network/sdk-protocol-core)
The npm package @xyo-network/sdk-protocol receives a total of 419 weekly downloads. As such, @xyo-network/sdk-protocol popularity was classified as not popular.
We found that @xyo-network/sdk-protocol demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.