
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
orquesta-embed
Advanced tools
Embed Orquesta AI-powered development UI into any production website.
npm install orquesta-embed
import { OrquestaEmbed } from 'orquesta-embed'
import 'orquesta-embed/styles.css'
function App() {
return (
<>
<YourApp />
<OrquestaEmbed
token="oek_xxxxx"
position="bottom-right"
captureConsole={true}
captureNetwork={true}
onReady={() => console.log('Orquesta ready!')}
/>
</>
)
}
<script src="https://orquesta.live/embed/v1/orquesta.min.js"></script>
<script>
const widget = Orquesta.init({
token: 'oek_xxxxx',
position: 'bottom-right',
captureConsole: true,
captureNetwork: true,
onReady: () => console.log('Orquesta ready!')
});
// Programmatic API
widget.open();
widget.close();
widget.toggle();
widget.startElementSelection();
widget.submitPrompt('Fix this bug', { includeConsole: true });
widget.destroy();
</script>
| Option | Type | Default | Description |
|---|---|---|---|
token | string | required | Your embed token (oek_xxx) |
position | 'bottom-right' | 'bottom-left' | 'top-right' | 'top-left' | 'bottom-right' | Panel position |
defaultOpen | boolean | false | Start with panel open |
theme | 'dark' | 'light' | 'auto' | 'dark' | Color theme |
features | Feature[] | All features | Enabled features |
captureConsole | boolean | true | Capture console.log/error |
captureNetwork | boolean | true | Capture fetch/XHR errors |
hotkey | string | 'ctrl+shift+o' | Keyboard shortcut to toggle |
onReady | () => void | - | Called when connected |
onPromptSubmit | (promptId: string) => void | - | Called when prompt submitted |
onError | (error: Error) => void | - | Called on errors |
MIT
FAQs
Embed Orquesta UI into any production website
The npm package orquesta-embed receives a total of 0 weekly downloads. As such, orquesta-embed popularity was classified as not popular.
We found that orquesta-embed demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.