
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@bpanel/name-manager
Advanced tools
From handshake.org:
Handshake is a decentralized, permissionless naming protocol compatible with DNS where every peer is validating and in charge of managing the root zone with the goal of creating an alternative to existing Certificate Authorities. Its purpose is not to replace the DNS protocol, but to replace the root zone file and the root servers with a public commons.
The bPanel Name Manager plugin is a proof of concept for interacting with the Handshake network using bPanel. Since hsd, the reference implementation for the handshake protocol, is compatible with the bcoin API, bPanel is able to support handshake relatively easily. The naming and DNS API does require additional functionality however, which is why we use the hs-client interface made available through the BPClient class in the bpanel-utils module.
You will need to make sure you've configured bPanel's server to connect to a
handshake node. You can read more about configuring the bPanel server here. Once bPanel has been setup and is connecting to an hsd node, install the plugin by adding @bpanel/name-manager
to your plugins config (further instructions here).
Since this is still a proof of concept, not all of the API is supported. Use on a live network at your own risk as the UI could still use some polish. All other security related caveats when working with blockchains and cryptocurrencies also apply.
The Name Manager plugin currently supports:
Many other plugins that are compatible on Bitcoin and Bitcoin Cash will also work for Handshake as well. Available plugins include:
Check out the Showcase on bpanel.org for more!
Install it yourself by adding @bpanel/hdark
to your bPanel's plugins config.
FAQs
A bPanel plugin for managing names on the handshake network
We found that @bpanel/name-manager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.