
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
virtual-machine
Advanced tools
A complete RISC-V 64-bit (RV64GC) virtual machine implementation in Rust, capable of running modern operating systems like Linux (xv6) and custom bare-metal kernels. It is designed to run both natively and in the browser via WebAssembly.
Run the emulator from the command line:
# Run a kernel image
cargo run --release -- --kernel path/to/kernel
# Run with networking (WebSocket backend)
cargo run --release -- --kernel path/to/kernel --net-ws ws://localhost:8765
# Run with block device
cargo run --release -- --kernel path/to/kernel --disk path/to/fs.img
The VM exposes a simple API for JavaScript integration:
import { WasmVm } from "virtual-machine";
// Initialize VM with kernel binary
const vm = new WasmVm(kernelBytes);
// Connect networking
vm.connect_network("ws://localhost:8765");
// Step execution
while (running) {
vm.step();
}
The VM follows a modular design:
cpu.rs: Instruction decoder and execution pipeline.mmu.rs: Virtual address translation.bus.rs: Memory mapping and device routing.virtio.rs: VirtIO device implementations.net.rs: Network backend abstraction.# Build native CLI
cargo build --release
# Build WASM package
wasm-pack build --target web
FAQs
RISCV Virtual Machine with WASM and Node.js native support
We found that virtual-machine demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.