Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/nitohu/accounting
This is an accounting application which is developed in go.
You can create accounts, transactions, categorise them and have statistics which whom you can analyze your finances. The server (master) of this application is written in Golang.
Recommendation:
https://www.pgadmin.org/download/
!!! If you are manually inserting records into the database, please always make sure none of the fields in the record are NULL !!!
Create the database inside postgres:
> CREATE DATABASE accounting;
-- Connect to the database
> \c accounting
Open the db.sql
file and execute the SQL commands for creating the tables.
You can now insert the queries for the statistics in the statistics table. Please make sure none of the fields are NULL, use an empty string or a placeholder instead.
Please use the following external IDs and types of visualisation for the statistics to display them properly on the dashboard:
Name | External Identifier | Visualisation |
---|---|---|
Total Number of Transactions last 30 days | transaction_count | number |
Total Balance | total_balance | number |
Balance per day | balance_per_day | bar |
Total Amount per Category | total_category_amount | pie |
Amount per Category, last 30 days | past_category_amount | pie |
Total expenses last 30 days | total_expenses | number |
Total income last 30 days | total_income | number |
Average balance per day, total | total_avg_balance | number |
You need to set a master password for the application, so that you can login. You need to insert the record manually into the statistics table.
Use the following SQL command for inserting the record into the settings table:
INSERT INTO settings (name, password, email, last_update, calc_interval, calc_uom, currency, session_key, salary_date) VALUES (
'your name',
'8C6976E5B5410415BDE908BD4DEE15DFB167A9C873FC4BB8A81F6F2AB448A918',
'your email',
NOW(),
30,
'minutes',
'€',
'',
NOW()
);
The password in this query is admin
.
If you want to set your own password, please encrypt it with Sha256.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.