
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@aragon/sdk-client
Advanced tools
`@aragon/sdk-client` provides easy access to the high level interactions to be made with an Aragon DAO. It consists of three different components:
@aragon/sdk-client
provides easy access to the high level interactions to be
made with an Aragon DAO. It consists of three different components:
Contributors: See development below
Use npm or yarn to install @aragon/sdk-client.
npm install @aragon/sdk-client
yarn add @aragon/sdk-client
The SDK usage is demonstrated in the SDK examples section of the Developer Portal.
In order for the SDK to be used in restricted environments like react native install the following polyfilesand into your project:
Then import them like the following before you import the Aragon SDK package:
import "@ethersproject/shims";
import "react-native-url-polyfill/auto";
import { Client } from "@aragon/sdk-client";
The building blocks are defined within the src/internal
folder. The high level
client wrappers are implemented in src/client*.ts
See ClientCore
(source):
Client
and all plugin classes like TokenVotingClient
.When updating a ClientXXX
(plugin) class:
src/internal/interfaces.ts
When updating the Client
class:
src/internal/interfaces.ts
Create a new class that extends
from ClientCore
, receives a Context
on the
constructor
and follows the structure of TokenVotingClient.
To execute library tests just run:
yarn test
If you believe you've found a security issue, we encourage you to notify us. We welcome working with you to resolve the issue promptly.
Security Contact Email: sirt@aragon.org
Please do not use the issue tracker for security issues.
FAQs
`@aragon/sdk-client` provides easy access to the high level interactions to be made with an Aragon DAO. It consists of three different components:
The npm package @aragon/sdk-client receives a total of 38 weekly downloads. As such, @aragon/sdk-client popularity was classified as not popular.
We found that @aragon/sdk-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.