Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@alexbh/celocli
Advanced tools
Tool for interacting with the Celo Protocol.
Use yarn build:sdk <NETWORK>
to build the sdk for the target environment (CLI dependency).
Use yarn build
to compile the CLI.
Use yarn docs
to populate packages/docs
with generated documentation. Generated files should be checked in, and CI will fail if CLI modifications cause changes in the docs which were not checked in.
See @celo/dev-cli for how we customize doc generation.
I'm getting the follow error:
Cannot find module '@celo/contractkit'
.
A possible solution is to build the monorepo manually.
Go to the celo-monorepo
root directory and
> yarn build
If all works well, navigate to packages/cli
.
I've got the cli built successfully but the running the
cli
yields:Error: Returned values aren't valid, did it run Out of Gas?
.
When running the cli
against a full node, this can mean that the contract artifacts are out of date.
Solution: switch to the alfajores
branch and build the celo-monorepo
.
Go to the celo-monorepo
root directory and
> git checkout alfajores
> yarn
> yarn build
> cd packages/cli
> ./bin/run account:balance $CELO_ACCOUNT_ADDRESS
FAQs
CLI Tool for transacting with the Celo protocol
We found that @alexbh/celocli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.