Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
@7i7o/pl-sync
Advanced tools
Package to sync git repos into Protocol Land
Open the github repo you want to sync to Protocol Land and add a new secret (Repo -> Settings -> Secrets and variables -> Actions -> New Repository Secret)
Fill in WALLET
for "Name", your Arweave wallet's JWK in the "Secret" field and then click on the "Add secret" button.
Switch into the Actions tab and click "New workflow"
On the "Choose a workflow" page, click on "set up a workflow yourself"
Paste this into the .yml
file:
name: Protocol Land Sync
on:
# Run with every push to 'main' branch:
push:
branches:
- 'main'
# Run Manually:
#workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
steps:
- name: 'Checkout repo (default branch)'
uses: actions/checkout@v3
with:
# fetch all history for all branches:
fetch-depth: 0
- name: 'Checkout all branches'
run: |
default_branch=$(git branch | grep '*' | sed 's/\* //')
for abranch in $(git branch -a | grep -v HEAD | grep remotes | sed "s/remotes\/origin\///g"); do git checkout $abranch ; done
git checkout $default_branch
git branch -a
- name: 'Setup node 18'
uses: actions/setup-node@v3
with:
node-version: 18.x
- name: 'Sync repo to Protocol Land'
run: npx @7i7o/pl-sync
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
REPO_TITLE: ${{ github.event.repository.name }}
REPO_DESCRIPTION: ${{ github.event.repository.description }}
WALLET: ${{ secrets.WALLET }}
NOTE: Notice that this GH Action will run on every push to the 'main' branch. If you read the comments on the
.yml
code, you can change it to be run manually by commenting the 3 lines after theon:
and uncommenting theworkflow_dispatch:
line.
You need a node package manager installed (npm
, yarn
or pnpm
) to run it locally.
Set up a .env
file in the root folder with WALLET='YOUR_WALLET_JWK_HERE'
and paste your Arweave wallet's JWK in there
From the root folder of your repo, run Run npx @7i7o/pl-sync
, yarn @7i7o/pl-sync
or pnpx @7i7o/pl-sync
depending on which package manager you have installed.
Go into Protocol Land's page and login with your Arweave wallet.
FAQs
Sync git repos to Protocol Land
We found that @7i7o/pl-sync demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.