
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
The official Node.js/npm API for the
radiochron Rust Wi-Fi
diagnostics core for applications and services.
It supports Windows x64, Linux x64/ARM64, Intel Mac, and Apple Silicon Mac. The npm archive carries a small native adapter linked directly to the pinned Rust core; JavaScript applications never need to parse platform commands themselves.
Publication is pending. Until the package is published, install it from this repository or use a local checkout.
const { getRadioChronCoreClient } = require('radiochron');
const radiochron = getRadioChronCoreClient();
const interfaces = await radiochron.status();
const nearby = await radiochron.networks({ refreshScan: true });
const analysis = await radiochron.analyze();
const connectivity = await radiochron.diagnoseConnectivity({
dnsName: 'broker.lan',
tcpTarget: 'broker.lan:1883'
});
await radiochron.chronicle.start({ intervalSeconds: 5 });
const recentChanges = await radiochron.chronicle.recent({ maxEntries: 100 });
await radiochron.chronicle.stop();
radiochron/core remains an equivalent explicit export for applications that
prefer it. The typed API covers status, scan, detailed BSS inventory, caveated
analysis, connection sampling, caller-targeted connectivity diagnosis, and the
change-only chronicle. call() remains available as a low-level escape hatch.
The adapter uses a private newline-delimited request protocol between Node and
the linked Rust process. The
radiochron-electron
application imports this Node API and bundles its native adapter in installers.
npm test
npm run build:core
package.json pins one exact radiochron core commit. prepack verifies the
identity and SHA-256 of every native target before it can enter the npm archive.
CI builds Windows x64, Linux x64/ARM64, Intel Mac, and Apple Silicon variants and
checks the JavaScript API on supported Node versions.
Releases are published manually from an authenticated npm console. The archive
is assembled from the five artifacts of one green CI run, prepack verifies
their identity/core revision/SHA-256, and npm run verify:package rejects Rust
target/ output, missing platform binaries, or an unexpectedly large archive.
The version tag is pushed only after the public registry copy is verified; no
npm credential is stored in GitHub.
radiochron — Rust IoT core.radiochron-js — this
Node/npm library over the core.radiochron-electron
— a separate desktop application consuming radiochron-js.Apple hosts use CoreWLAN, Linux uses nl80211, and Windows uses the native WLAN API through the Rust core.
Dual-licensed under MIT or Apache-2.0.
FAQs
Cross-platform Node.js API and streams for RadioChron Wi-Fi flight recording, incident diagnosis, and portable BLE history/risk analysis.
The npm package radiochron receives a total of 44 weekly downloads. As such, radiochron popularity was classified as not popular.
We found that radiochron demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.