
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
github.com/blocktree/openwallet/v2
openwallet框架定义了一套规范化的钱包体系开发模型,应用开发者无需了解区块链底层协议,即可支持多种区块链资产管理功能。 区块链底层协议开发者也可以实现openwallet框架资产适配器协议,开发者便可利用该区块链生态实现更多落地应用。 openwallet框架,未来将进化成为一个去中心化系统开发框架,跟随不断发展的区块链生态,提供更多应用开发组件库。
细节上,openwallet框架有以下特性:
兼容v1功能,扩展智能合约解析器,支持与合约进行交互,监听合约的事件日志。
v2版本完全兼容v1版本,只需在go.mod中依赖v2最新版本
require (
github.com/blocktree/openwallet/v2 latest
....
)
已依赖v1库的项目,可以安装Mod
GO111MODULE=on go get github.com/marwan-at-work/mod/cmd/mod
# 在你的项目的根目录,执行命令,import openwallet库相关的文件都会更新到v2包
mod upgrade --mod-name=github.com/blocktree/openwallet
如果你对项目有非常感兴趣,可创建issue 分享你的想法和创意。
openwallet is licensed under the GNU General Public License v3.0. See LICENSE for the full license text.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.