
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
Nano (XNO) cryptocurrency wallet CLI designed for AI agents and automated payment processing.
BERRYPAY_SEED for AI agentsnpm install -g berrypay
# Create wallet (no password, stored in ~/.berrypay/)
berrypay init
# Or use environment variable (for AI agents)
export BERRYPAY_SEED=your64charhexseed
# Show address
berrypay address
# Check balance (auto-receives pending)
berrypay balance
# Send XNO (use --yes to skip confirmation)
berrypay send nano_1abc... 0.1 --yes
# Receive pending
berrypay receive
BERRYPAY_SEED # 64-char hex seed (overrides config file)
BERRYPAY_RPC_URL # RPC node URL
BERRYPAY_WS_URL # WebSocket URL
Accept payments with auto-generated ephemeral addresses:
# Create a charge with webhook
berrypay charge create 0.5 --webhook http://localhost:3000/callback
# With metadata for your webhook
berrypay charge create 0.5 \
--webhook http://localhost:3000/callback \
--metadata '{"orderId": "123"}'
# With QR code image
berrypay charge create 0.5 --qr --output /tmp/payment.png
# Check status (auto-receives and sweeps if paid)
berrypay charge status chg_abc123
# List all charges
berrypay charge list
# Check listener status
berrypay charge listener
# Stop listener
berrypay charge stop
1. charge create 1.0 → Ephemeral address generated, listener auto-starts
2. Customer pays → WebSocket detects payment
3. Auto-receive → Pending blocks received
4. Auto-sweep → Funds sent to main wallet (index 0)
5. Webhook called → Your server notified with charge details
6. Auto-stop → Listener stops when no active charges
{
"event": "charge.completed",
"charge": {
"id": "chg_abc123",
"address": "nano_3ephemeral...",
"amountNano": "0.5",
"sweepTxHash": "ABC123...",
"metadata": {"orderId": "123"}
},
"timestamp": "2026-01-30T12:00:00.000Z"
}
berrypay init # Create new wallet
berrypay import <seed> # Import from seed
berrypay address [--qr] # Show address
berrypay balance [--json] # Check balance (auto-receives)
berrypay send <addr> <amt> [-y] # Send XNO (auto-receives first)
berrypay receive # Receive pending
berrypay watch # Watch for payments
berrypay export # Show seed
berrypay delete [-y] # Delete wallet
berrypay config # Show/set config
berrypay charge create <amt> # Create charge (auto-starts listener)
berrypay charge status <id> # Check charge (auto-sweeps if paid)
berrypay charge sweep <id> # Manually sweep to main wallet
berrypay charge list # List charges
berrypay charge listener # Check if listener running
berrypay charge stop # Stop background listener
berrypay charge cleanup # Remove swept charges
import { BerryPayWallet, PaymentProcessor } from 'berrypay';
const wallet = new BerryPayWallet({ seed: process.env.BERRYPAY_SEED });
// Send
await wallet.send('nano_1...', BerryPayWallet.nanoToRaw('0.1'));
// Payment processor
const processor = new PaymentProcessor({ wallet, autoSweep: true });
processor.on('charge:completed', (charge) => console.log('Paid!', charge.id));
processor.on('charge:swept', ({ hash }) => console.log('Swept:', hash));
await processor.start();
const charge = await processor.createCharge({
amountNano: '1.0',
webhookUrl: 'http://localhost:3000/callback',
metadata: { orderId: '123' }
});
// charge.address - send payment here
See skills/berrypay/SKILLS.md for a comprehensive guide on using BerryPay CLI as an AI agent.
~/.berrypay/config.json~/.berrypay/charges.json~/.berrypay/listener.pidMIT
FAQs
Nano (XNO) cryptocurrency wallet CLI with payment processing for AI agents
The npm package berrypay receives a total of 12 weekly downloads. As such, berrypay popularity was classified as not popular.
We found that berrypay demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.