
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
github.com/oraclize/ethereum-api
Thanks to this Ethereum API, enriching your smart-contracts with external data using Provable is very easy!
In Solidity it is as simple as inheriting the usingProvable
contract that you'll find in this repository.
This will provide your contract with functions like provable_query(...)
, which make it trivial for you to leverage our oracle technology straight away.
If you're using the Remix IDE it's even easier still - simply import the latest version of Provable into your contract like so:
import "github.com/provable-things/ethereum-api/provableAPI.sol";
Or if you need a specific version of the API, import that directly via:
import "github.com/provable-things/ethereum-api/contracts/solc-v0.8.x/provableAPI.sol";
There are versions of the API targetting the following solc
compilers:
solc-v0.4.25
solc-v0.5.x
solc-v0.6.x
solc-v0.8.x
To learn more about the Provable technology, please refer to our documentation here.
For working examples of how to integrate the Provable API into your own smart-contracts, head on over to the Provable Ethereum Examples repository. Here you'll find various examples that use Provable to feed smart-contracts with data from a variety of external sources.
There are even some examples here showing you how you can use Provable in a local Truffle development environment!
If you want to ask us something, or tell us something, there's loads of ways to get in touch:
❍ We have a Twitter
❍ And a Gitter
❍ Or a Website
❍ Alongside a Youtube
❍ Plus a Github
:skull: CAUTION: It is highly recommended to avoid using Serpent, especially in production. The serpent version of the Provable API herein remains for historical reasons but support for it is no longer maintained. Serpent is considered outdated and audits have shown it to be flawed. Use it at your own risk!
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.