
Research
TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.
@coinflowlabs/react-native
Advanced tools
import {useWallet} from '@solana/wallet-adapter-react';
const wallet = useWallet();
const connection = useConnection();
<CoinflowWithdraw wallet={wallet} merchantId='<YOUR MERCHANT ID>' env='prod|sandbox|staging' connection={connection} />;
Props:
wallet: The Solana Wallet Adapter WalletmerchantId: Your Merchant ID (Contact Coinflow support for this)connection: Solana Connectionenv (optional): This defaults to prod
stagingonSuccess (optional): function to run when the withdrawal process is successfulimport {useWallet} from '@solana/wallet-adapter-react';
const wallet = useWallet();
const connection = useConnection();
<CoinflowPurchase wallet={wallet} merchantId='<YOUR MERCHANT ID>' env='prod|sandbox|staging' connection={connection} />;
Props:
wallet: The Solana Wallet Adapter WalletmerchantId: Your Merchant ID (Contact Coinflow support for this)connection: Solana Connectionenv (optional): This defaults to prod
stagingonSuccess (optional): function to run when the purchase process is successfultransaction (optional): transaction for the user to run which redeems their credits with your smart contract. Create this transaction just like you would for a normal user who has USDC in their account.partialSigners (optional): Keypairs of Partial Signers to sign the transaction with, this is necessary when initializing new accounts as the new account Keypair must sign the transaction.debugTx (optional): Setting this to true will sign the transaction with the wallet, and send the transaction with no preflight checks allowing for easier debug of any issues.Breaking Changes
supportsVersionedTransactions in CoinflowWithdraw to false.getFeePayer - Return the PublicKey of the Coinflow Fee Payertoken prop for CoinflowPurchase with polygonGenesis 1:1
FAQs
React Native Component for Coinflow
The npm package @coinflowlabs/react-native receives a total of 1,649 weekly downloads. As such, @coinflowlabs/react-native popularity was classified as popular.
We found that @coinflowlabs/react-native demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.

Security News
/Research
Widespread GitHub phishing campaign uses fake Visual Studio Code security alerts in Discussions to trick developers into visiting malicious website.