
Research
Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
@arianee/arianee-wallet
Advanced tools
Arianee-Wallet is a universal UI tool kit to implement easily and quickly Arianee NFT in your web-site.
Today arianee-passport
is the only web-component available.
Compatible with:
using npm
npm install @arianee/arianee-wallet
<html>
<head>
<script type="text/javascript" src="./node_modules/@arianee/arianee-wallet/arianee-wallet.js"></script>
...
or add directly our unpkg link
<html>
<header>
<script src="https://unpkg.com/@arianee/arianee-wallet/arianee-wallet.js"></script>
...
The Arianee-Passport is a web-component which can be implemented in any web front-end project.
Append arianee-passport component to the document.
certificate-id
: the Certificate ID to be displayed (REQUIRED)
auth
: JWT (REQUIRED)
passphrase
: Certificate's passphrase
A valid JWT must include 2 proprieties :
Who is an authorized JWT signer authority?
testnet : anyone can sign jwt
mainnet : only authorized public key (please contact us contact@arianee.org)
Example:
<body>
<arianee-passport
passphrase="{{pass}}"
certificate-id="{{id}}"
auth="{{jwt}}"
></arianee-passport>
</body>
ArianeeWalletStyleConfig {
fontFamily?: string;
buttons?: {
color?: string;
bgColor?: string;
bgHoverColor?: string;
textHoverColor?: string;
};
modal?: {
bgColor?: string;
borderColor?: string;
titleColor?: string;
textColor?: string;
},
spinnerColor?: string;
}
Example:
window.arianeeWalletStyle = {
fontFamily: '"Roboto","Helvetica Neue",sans-serif',
buttons: {
color: '#222',
bgColor: '#fec42e',
bgHoverColor: '#e8ae16',
textHoverColor: '#222'
},
modal: {
borderColor: '#fec42e',
titleColor: 'yellow'
}
};
enum NETWORK {
testnet = "testnet",
mainnet = "mainnet",
arianeeTestnet = "arianeetestnet",
mumbai = "mumbai",
polygon = "polygon"
}
if network is not defined, testnet is set by default
Example:
window.network = 'mainnet';
To pass languages, pass as a string a list of languages separted with a comma.
<arianee-passport languages='fr,en-US,es'></arianee-passport>
arianee passport UI can be disabled, you can access all the available features programmatically
Example:
hide
attribute<arianee-passport
id="passport"
hide="true"
passphrase="{{pass}}"
certificate-id="{{id}}"
auth="{{token}}"
></arianee-passport>
getMethods
async function test() {
// loading = true
const passport = document.getElementById('passport');
const methods = await passport.getMethods();
methods.openAuthenticityModal();
// loading = false
}
await passport.getMethods()
is Singleton the request will be made only the first time.
it's recommended to call it each time you ask for a Modal or data like the example belowasync function Authenticity() {
// loading = true
const passport = document.getElementById('passport');
const methods = await passport.getMethods();
methods.openAuthenticityModal();
// loading = false
}
async function share() {
// loading = true
const passport = document.getElementById('passport');
const methods = await passport.getMethods();
methods.openSharePassportModal();
// loading = false
}
async function transfer() {
// loading = true
const passport = document.getElementById('passport');
const methods = await passport.getMethods();
methods.openTransferPassportModal();
// loading = false
}
wallet: ArianeeWallet
certSummary: CertificateSummary
Open Verify Authenticity Modal
openAuthenticityModal(): void
Open History Modal
openHistoryModal(): void
Open Share Passport Modal
openSharePassportModal(): void
Open Transfer Passport Modal
openTransferPassportModal(): void
arianee-passport web component exposes arianee api methods
owner of
ownerOf(certificateId): {address:string, isOwner:boolean, hasOwner:boolean}
FAQs
arianee web component wallet
We found that @arianee/arianee-wallet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
Product
A single platform for static analysis, secrets detection, container scanning, and CVE checks—built on trusted open source tools, ready to run out of the box.
Product
Socket is launching experimental protection for the Hugging Face ecosystem, scanning for malware and malicious payload injections inside model files to prevent silent AI supply chain attacks.