Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/misphix/cryptocurrencyserver
configreade/config.yaml
's sample-key with real key/api/v1/cryptocurrency/
本API是用來查詢Bitcoin的現值。有兩個參數可以使用,分別是currency
和provider
。這兩個參數都是透過GET的方法所取得。
provider
: 選擇所要使用的provider,可使用的選項有CoinMarketCap
、CryptoCompare
、CoinGecko
。若沒輸入預設為CoinGecko
。currency
: 選擇要查詢的貨幣單位,可使用的選項有usd
、twd
。若沒輸入預設為twd
。可以透過config檔去改變程式的設定值,改完後要動啟程式才會生效。
以下為Config所代表的意義:
CoinMarketCapKey
: CoinMarkerCap API所需的keyCryptoCompareKey
: CryptoCompare API所需的keySecondPerToken
: 對API provider所實做的流量控制系統為token bucket。若此參數值為N時,則每N秒加入一個token。MaxSizeOfBucket
: 對API provider所實做的流量控制系統為token bucket。若此參數值為N時,則bucket的容量為N。UserMaxQueryPerDay
: 對user的流量控制的參數。若此參數值為N時,則在24小時內user最多只能做出N次query。FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.