Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/decred/dcrd/blockchain/standalone
Package standalone provides standalone functions useful for working with the Decred blockchain consensus rules.
The primary goal of offering these functions via a separate module is to reduce the required dependencies to a minimum as compared to the blockchain module.
It is ideal for applications such as lightweight clients that need to ensure basic security properties hold and calculate appropriate vote subsidies and block explorers.
For example, some things an SPV wallet needs to prove are that the block headers all connect together, that they satisfy the proof of work requirements, and that a given transaction tree is valid for a given header.
The provided functions fall into the following categories:
$ go get -u github.com/decred/dcrd/blockchain/standalone
CompactToBig Example
Demonstrates how to convert the compact "bits" in a block header which
represent the target difficulty to a big integer and display it using the
typical hex notation.
BigToCompact Example
Demonstrates how to convert a target difficulty into the compact "bits" in a
block header which represent that target difficulty.
CheckProofOfWork Example
Demonstrates checking the proof of work of a block hash against a target
difficulty.
CalcMerkleRoot Example
Demonstrates calculating a merkle root from a slice of leaf hashes.
Package standalone is licensed under the copyfree ISC License.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.