Npm Package - GoKawiil

Gitframes launches as npm package combining Photoshop, After Effects and Blender tools for AI coding agents

Gitframes is a new npm package that bundles compositing, motion graphics, typography and 3D scene rendering into a single lightweight tool meant to be driven by code rather than desktop software. It lets an AI coding agent write a TypeScript composition and render an MP4 directly on GPU hardware via WebGPU, Dawn, Metal or Vulkan, without using a headless browser or screenshot pipeline. The project is currently in beta, with APIs and some features still subject to change.

github.com · 2026-10-05

Fake mathjs npm package hides encrypted backdoor triggered by equation solving

Security researchers at SafeDep discovered that a malicious npm package called mathmain, disguised as a copy of the popular mathjs library, contains a hidden remote access implant. The malicious code stays encrypted and dormant until a specific equation is solved using the library's lusolve() solver function, which acts as a decryption key to unlock and execute the payload.

safedep.io · 2026-09-21