
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
git push for Bitcoin — inscribe content, register domains, manage tokens on BSV
git push for Bitcoin. Inscribe content, register domains, and manage tokens on BSV.
npm install -g bitgit
bit init # scaffold .bit.yaml for your project
bit push # git push + inscribe changed content on BSV
bit register <domain> # inscribe a domain on DNS-DEX
bit status # show wallet, domain, token & version chain
# 1. Set up your project
cd your-project
bit init
# 2. Configure your BSV key
export BOASE_TREASURY_PRIVATE_KEY="your-wif-key"
# 3. Push content to Bitcoin
bit push
bit push does two things:
git push to your remote (if there are commits to push)Every inscription is chained — each transaction's change output feeds the next input, so you can inscribe dozens of files in one session without waiting for confirmations.
bit init creates a .bit.yaml in your project root:
project:
name: my-project
domain: my-project.com
token: MYTOKEN
wallet:
key_env: BOASE_TREASURY_PRIVATE_KEY
content:
type: blog # blog | repo | domain | custom
source: content/blog/ # directory to watch
format: bitcoin_schema # bitcoin_schema | op_return
protocol: my-project-blog
db:
supabase_url_env: NEXT_PUBLIC_SUPABASE_URL
supabase_key_env: SUPABASE_SERVICE_ROLE_KEY
version_table: blog_post_versions
dns_dex:
token_symbol: $my-project.com
Uses the B + MAP + AIP Bitcom protocols:
OP_FALSE OP_RETURN <protocol> <content-type> <payload>
bit register kwegwong.com
bit register kwegwong.com --category=culture --supply=1000000000
Inscribes a dnsdex-domain token on BSV and prints the DNS TXT records to add for verification.
Transactions are broadcast with automatic fallback:
All commands support --dry-run to preview without broadcasting:
bit push --dry-run
bit register example.com --dry-run
| Variable | Required | Description |
|---|---|---|
BOASE_TREASURY_PRIVATE_KEY | Yes | BSV private key (WIF format) |
NEXT_PUBLIC_SUPABASE_URL | Optional | Supabase URL for version chain DB |
SUPABASE_SERVICE_ROLE_KEY | Optional | Supabase service role key |
bitgit is the evolution of bgit (v2, 2026). Same DNA — commit/push to Bitcoin — but instead of wrapping git with a payment gate, bit adds Bitcoin alongside git.
MIT
FAQs
git push for Bitcoin — inscribe content, register domains, manage tokens on BSV
We found that bitgit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.