
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
A secure AI agent response filtering and proxy service using Solana blockchain
PortaSecura is an enterprise-grade security solution that filters and manages AI agent outputs safely. Through a payment system utilizing PORTA tokens based on Solana blockchain, we provide secure and transparent services.
- Python 3.8+
- Docker & Docker Compose
- Solana CLI (optional)
- Redis
The easiest way to install PortaSecura is through pip:
pip install porta-secura
For development version:
pip install --pre porta-secura
With optional dependencies:
# For all features
pip install porta-secura[all]
# For blockchain features only
pip install porta-secura[blockchain]
# For proxy features only
pip install porta-secura[proxy]
For containerized deployment:
git clone https://github.com/portasecura/porta-secura.git
cd porta-secura
cp .env.example .env
# Edit .env with your configuration
docker-compose up -d
For development or customization:
git clone https://github.com/portasecura/porta-secura.git
cd porta-secura
pip install -e .
# Simple usage
from porta_secura import FilterManager
# Initialize the filter manager
filter_manager = FilterManager()
# Filter content
filtered_content = filter_manager.process_response(
content="Text containing sensitive information",
sensitivity=0.7
)
# Advanced usage with blockchain integration
from porta_secura.blockchain import PaymentProcessor
from porta_secura.core import SecurityManager
# Initialize components
payment_processor = PaymentProcessor()
security_manager = SecurityManager()
# Configure wallet
wallet_address = "your-solana-wallet-address"
# Process secured content with payment
async def process_secure_content():
# Verify wallet balance
if await payment_processor.check_subscription_status(wallet_address):
# Process content
result = filter_manager.process_response(
content="Sensitive content to filter",
sensitivity=0.8
)
# Process payment
await payment_processor.process_payment(wallet_address, 0.01)
return result
return None
porta-secura/
├── core/
│ ├── filters.py # Content filtering
│ ├── security.py # Security features
│ └── proxy.py # Reverse proxy
├── blockchain/
│ ├── solana.py # Solana integration
│ └── wallet.py # Wallet management
└── utils/
├── logging.py # Logging utilities
└── validation.py # Input validation
Core dependencies:
fastapi>=0.68.0
uvicorn>=0.15.0
pydantic>=1.8.2
aiohttp>=3.8.1
Optional dependencies:
# Blockchain features
solana>=0.23.0
spl-token>=0.2.0
# AI features
spacy>=3.2.0
transformers>=4.19.0
from porta_secura import FilterManager
# Initialize the filter manager
filter_manager = FilterManager()
# Filter content
filtered_content = filter_manager.process_response(
content="Text containing sensitive information",
sensitivity=0.7
)
graph TD
A[AI Agent Server] --> B[PortaSecura Proxy]
B --> C[Content Filter]
C --> D[Security Layer]
D --> E[Blockchain Integration]
E --> F[AI Agent Client]
PortaSecura includes robust security measures:
Basic: 100k requests/month, $499/month
Professional: 1M requests/month, $1,999/month
Enterprise: Custom volume, Contact for pricing
Run the test suite:
python -m pytest tests/
We welcome contributions! Please see CONTRIBUTING.md for guidelines.
pre-commit run --all-files
mypy porta_secura
bandit -r porta_secura
This project is licensed under the MIT License with restrictions - see the LICENSE file for details.
Built with security in mind by the PortaSecura Team.
For business inquiries: business@portasecura.io
For partnerships: partnerships@portasecura.io
FAQs
A secure AI agent response filtering and proxy service using Solana blockchain
We found that porta-secura demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.