Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/chainsafe/chainbridge-ethereum-trie
This package exposes the transaction trie from go-ethereum, so it can be used to (re)construct tries and compute proofs.
Here is an example of how this library could be used.
// assume trieDB is some already instantiated leveldb instance
// assume the listener has retrieved the transactions root (txRoot), transactions (txList), and key of the transaction of interest (txPath) for some block while polling
// instantiate new instance of TxTries object
txTries := NewTxTries(3)
// add new trie to the txtries object with relevant txRoot, transactions, and triedb
txTries.AddNewTrie(txRoot, txList, trieDB)
// we can retrieve a proof for our transaction of interest and verify it as follows
txProof := txTries.RetrieveProof(txRoot, txPath)
exists := VerifyProof(txRoot, txPath, txProof)
if exists {
// we know the transaction exists in our trie
// perform some action
}
// we can also retrieve the encoded version of the proof for our transaction of interest as follows:
encodedTxProof := txTries.RetrieveEncodedProof(txRoot, txPath)
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.