Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
By Kush Pandya - Dec 24, 2025
o1js 
o1js
o1js makes it easy for developers to build applications powered by zero-knowledge (zk) cryptography.
Developers can use o1js to write zk circuits and prove + verify them in browser or node environment, or create proofs to be verified by the Mina Protocol.
Learn More
-
zkApp CLI is a scaffolding tool to start a new project with o1js
-
To learn more about the language features, see the o1js documentation.
-
To learn how to build ZkApps on Mina, see the zkApp documentation.
-
To meet other developers building zkApps with o1js, participate in the #zkapps-developers channel on Mina Protocol Discord.
-
For a list of changes between versions, see the CHANGELOG.
-
To stay up to date with o1js, see the o1Labs Blog.
Contributing
o1js is an open source project. We appreciate all community contributions to o1js!
See the Contributing guidelines for ways you can contribute.
Development Workflow
For guidance on building o1js from source and understanding the development workflow, see o1js README-dev.
Community Packages
High-quality community packages from open source developers are available for your project.
- o1js-elgamal A partially homomorphic encryption library for o1js based on Elgamal encryption: GitHub and npm
- o1js-pack A library for o1js that allows a zkApp developer to pack extra data into a single Field. GitHub and npm
- zk-regex-o1js A CLI tool for compiling ZK Regex circuits in o1js. Github and npm
- eddsa-o1js A library for provable EdDSA and Twisted Edwards Curve operations. Github and npm
To include your package, see Creating high-quality community packages.
FAQs
TypeScript framework for zk-SNARKs and zkApps
The npm package o1js receives a total of 2,059 weekly downloads. As such, o1js popularity was classified as popular.
We found that o1js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 03 Dec 2025
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Security News
Engineering with AI Podcast: The Promise of AI-First Development
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.
By Sarah Gooding - Dec 24, 2025
Research
/Security News
Spearphishing Campaign Abuses npm Registry to Target U.S. and Allied Manufacturing and Healthcare Organizations
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.
By Nicholas Anderson, Kirill Boychenko - Dec 23, 2025