
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@authereum/sdk
Advanced tools
authereum
package instead.The Authereum JavaScript SDK
npm install @authereum/sdk
import Authereum from '@authereum/sdk'
const authereum = new Authereum(/* options */)
Watch and build:
npm run dev
Build:
npm run build
Lint:
npm run lint
npm test
Q: I added a function to the Authereum SDK and already removed the node_modules from each dir and ran lerna bootstrap
, but the frontend is unable to use the function. Additionally, the function is not found anywhere in the node_modules/authereum/dist directory
A: lerna
is probably using the npm module authereum
, as opposed to the local authereum
module. This is because the authereum
version in /packages/frontend/package.json matches an existing npm module. (I assume) lerna
prioritizes live packages, so when you run lerna bootstrap
and it runs npm install
, it is installing from npm. To fix it, you need to bump the local version of authereum
in /packages/authereum/package.json and then copy that version into the package.json
in /packages/frontend/package.json. Then rerun lerna bootstrap
(or just lerna link
if you are in the frontend directory).
FAQs
The Authereum JavaScript SDK
We found that @authereum/sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.