
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@zerodust/ai-sdk
Advanced tools
Vercel AI SDK tools for sweeping an agent's native gas balance to exactly zero across 25+ EVM chains.
Vercel AI SDK tools for ZeroDust - sweep native gas tokens to exactly zero.
npm install @zerodust/ai-sdk ai zod
import { createZeroDustTools } from '@zerodust/ai-sdk';
import { generateText } from 'ai';
import { openai } from '@ai-sdk/openai';
// Create ZeroDust tools
const tools = createZeroDustTools({ environment: 'mainnet' });
// Use with generateText
const result = await generateText({
model: openai('gpt-4o'),
tools,
prompt: 'Check my balances on 0x1234...',
});
// Or with streamText
import { streamText } from 'ai';
const stream = streamText({
model: openai('gpt-4o'),
tools,
prompt: 'What chains does ZeroDust support?',
});
| Tool | Description |
|---|---|
zerodust_info | Get information about ZeroDust service and fees |
zerodust_get_chains | List all supported blockchain chains |
zerodust_get_balances | Check native token balances across all chains |
zerodust_get_quote | Get a quote for sweeping a chain |
zerodust_get_sweep_status | Check status of a submitted sweep |
zerodust_list_sweeps | List past sweeps for an address |
const tools = createZeroDustTools({
environment: 'mainnet', // or 'testnet'
apiKey: 'your-api-key', // optional, for higher rate limits
timeout: 30000, // request timeout in ms
});
MIT
FAQs
Vercel AI SDK tools for sweeping an agent's native gas balance to exactly zero across 25+ EVM chains.
We found that @zerodust/ai-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.