Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
0xacab.org/leap/bitmask-vpn
Bitmask needs the following minimum versions of supported operating systems:
Bitmask has been tested to work on windows 10 and 11 it might not work on earlier version of windows.
Clone this repo, install dependencies and build the application. Dependencies assume debian packages, or homebrew for osx. For Windows OS see corresponding section below. For other systems try manually, or send us a patch. bitmask-vpn can be branded for a specific provider by specifying the env variable PROVIDER during the build process; we currently support three providers: riseup, calyx, and bitmask. To create a client branded for 'riseup', run:
git clone git@0xacab.org:leap/bitmask-vpn.git && cd bitmask-vpn
sudo make depends # do not use sudo in osx
PROVIDER=riseup make vendor
make build
If you're using Ubuntu, you can use leapcodes ppa.
sudo add-apt-repository ppa:leapcodes/riseup-vpn
sudo apt update
sudo apt install riseup-vpn
The package is available as "riseup-vpn" in Debian Bookworm, albeit at an older version. To get the same, you could run:
sudo apt install riseup-vpn
The latest version is available for Debian Bookworm via backports. See the offcial page for instructions on how to set it up. If you are using Debian Testing/Unstable, riseup-vpn's latest version is available there as well.
If you're using an older version of Debian, then we do not have a package for the same. However, if you really desire a debian package you can build your own for the time being:
debuild -us -uc
sudo dpkg -i ../riseup-vpn*.deb
You can also run
PROVIDER=riseup make vendor
PROVIDER=riseup QMAKE=qmake6 make package_deb
Then install the built package with apt install -f ./deploy/*.deb
.
There are two AUR packages for Arch Linux. There is riseup-vpn-git that tracks main branch, so expect some instabilities (early birds catch the bugs they say, and we're thankful for that). There is also riseup-vpn with the latest stable release.
yay riseup-vpn
There is also a package in the Snap store.
sudo snap install riseup-vpn
Clone this repo, install dependencies and build the application. Dependencies assume debian packages, or homebrew for osx. For Windows OS see corresponding section below. For other systems try manually, or send us a patch. bitmask-vpn can be branded for a specific provider by specifying the env variable PROVIDER during the build process; we currently support three providers: riseup, calyx, and bitmask. To create a client branded for 'riseup', run:
git clone git@0xacab.org:leap/bitmask-vpn.git && cd bitmask-vpn
sudo make depends # do not use sudo in osx
PROVIDER=riseup make vendor
make build
To build you need at least go 1.22.
You can run some tests too.
sudo apt install qml-module-qttest
make test
make test_ui
As for now app can be build on Win OS using Cygwin
terminal.
You need to have installed and added to your user PATH (mentioned version tested in Win10):
Package Select
window install python3
and make
packages.Note: for #5 you don't need to add packages to PATH they will available in cygwin
after installation.
git clone git@0xacab.org:leap/bitmask-vpn.git && cd bitmask-vpn
Build script uses a symbolic link in one of the stages. Unfortunately Cygwin can't create native symlink from local non
admin user due to windows security restriction. To avoid this issue we need to call next target from cygwin terminal as
Administrator. This need to be done only once.
make relink_vendor
After relink_vendor
use this to build the app:
make build
After successful build application will be available at: build/qt/release/riseup-vpn.exe
To run tests:
make test
make test_ui
Log files:
Linux: ~/.config/leap/systray.log
Windows: %LocalAppData%\leap\systray.log
Mac: ~/Library/Preferences/leap/systray.log
Log levels can be set via environment variable (LOG_LEVEL=TRACE
, LOG_LEVEL=DEBUG
, default log level is INFO
). The cpp/qml part logs to stderr if env DEBUG=1
is set. If OPENVPN_LOG_TO_FILE=1
is set, the OpenVPN process writes its logs to os.TempDir()/leap-vpn.log. The verbosity of OpenVPN can be specified with env OPENVPN_VERBOSITY
(sets --verb
).
We use transifex to coordinate translations. Any help is welcome!
When you are willing to report an issue please use the search tool first. if you cannot find your issue, please make sure to include the following information:
/home/<your user>/.config/leap/systray.log
/Users/<your user>/Library/Preferences/leap/systray.log
, /Applications/RiseupVPN.app/Contents/helper/helper.log
& /Applications/RiseupVPN.app/Contents/helper/openvpn.log
C:\Users\<your user>\AppData\Local\leap\systray.log
, C:\Program Files\RiseupVPN\helper.log
& C:\Program Files\RiseupVPN\openvp.log
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.