
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
com.webasyst:app-blog
Advanced tools
Boilerplate demo app using this Webasyst library is available here: https://github.com/1312inc/Webasyst-X-Android
In your application module
repositories {
// Make sure maven central repository is enabled
mavenCentral()
// ...
}
dependencies {
// Library version to use
def webasyst_version = '1.1.1'
// Authentication module. Used in log in process and into the process of merging WAID profiles.
implementation "com.webasyst:auth-kt:$webasyst_version"
// Webasyst ID (WAID) api client
implementation "com.webasyst:waid:$webasyst_version"
// Webasyst client - used to retrieve basic installation data
implementation "com.webasyst:webasyst:$webasyst_version"
// Installer client - used to install products
implementation "com.webasyst:app-installer:$webasyst_version"
// Required application-specific modules
implementation "com.webasyst:app-blog:$webasyst_version"
implementation "com.webasyst:app-shop:$webasyst_version"
implementation "com.webasyst:app-site:$webasyst_version"
}
AndroidManifest.xml
, in application
section, add authentication redirect activity.
Note the comment on <data android:scheme=
key<activity android:name="net.openid.appauth.RedirectUriReceiverActivity">
<intent-filter>
<action android:name="android.intent.action.VIEW"/>
<category android:name="android.intent.category.DEFAULT"/>
<category android:name="android.intent.category.BROWSABLE"/>
<!-- Authentication redirect scheme. It should be unique across the device. It's recommended to use app's package name. -->
<data android:scheme="webasyst-x"/>
</intent-filter>
</activity>
Configure Webasyst ID (WAID) authentication sevice. This should be done once, preferably early in application's lifecycle. The recommended option is to extend Application
class and do configuration in it's onCreate()
method.
See WebasystAuthService.configure()
for details. For Kotlin, use configureWebasystAuth()
Implement Authentication Activity.
The easiest way to do it is to extend your Activity from WebasystAuthActivity
and call it's waSignIn()
from your SignIn button's onClick()
callback.
If that's not an option (eg. your Activity is an extension of some other activity) you can use WebasystAuthHelper directly. See WebasystAuthActivity
's code for details.
Create an instance of the WAIDClient
to use API methods. Please refer to the official Webasyst documentation
Get your Webasyst ID auth client id here: https://www.webasyst.com/my/waid/apps/
FAQs
Webasyst Blog api client
We found that com.webasyst:app-blog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.