Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/EscherAuth/escher
Go implementation of the AWS4 compatible Escher HTTP request signing and authentication library.
this will download the test cases for the escher implementation, and set in the env the required env key(s)
source .envrc
in 1.9:
go test ./...
in older go versions:
go test $(go list ./... | grep -v /vendor/)
More details are available at our Escher documentation site.
# install dep management tool
go get -u github.com/golang/dep/cmd/dep
# dep ensure the missing dependency packages
dep ensure
Everything except the Credential scope is optional.
JSON string that can include the all the configuration parameters:
Set the used Algo prefix when config json not includes it
set the hashAlgo when config json not includes it
set the vendorKey when config json not includes it
set the AUTH_HEADER_name when config json not includes it
set the DATE_HEADER_name when config json not includes it
set the credentialScope when config json not includes it
JSON serialized array of map that contains credentials with the following keys definitions:
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.