
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@contrast/agent-swc-plugin
Advanced tools
swc
plugins for the Node agent's swc rewriter.
See: https://swc.rs/docs/plugin/ecmascript/getting-started
rust
https://www.rust-lang.org/tools/install
wasm
targethttps://blog.rust-lang.org/2024/04/09/updates-to-rusts-wasi-targets.html
rustup target add wasm32-wasip1
cargo test
runs the rust unit tests for all plugins.
npm test
runs the JavaScript unit tests
To build release-ready targets, either run npm run build
or
cargo build --release --target wasm32-wasip1
.
These plugins are designed to be used programmatically from @swc/core
.
const { transformSync } = require('@swc/core');
const {
defaultRewriter,
defaultUnwriter,
// this is not being built or released until a need arises
//noPropagationRewriter
} = require('@contrast/agent-swc-plugin');
const result = transformSync(src, {
env: {
targets: {
node: '18', // specify your (lowest) node version
},
},
jsc: {
experimental: {
plugins: [[defaultRewriter], { assess: true, inject: true }]],
},
},
});
Run npm version <major|minor|patch>
to bump the version. Push the changes
and tag to the repo.
When the version bump is merged to main, invoke the release
workflow using
either the GitHub UI or the gh
CLI program.
FAQs
SWC plugins Contrast Node agent
The npm package @contrast/agent-swc-plugin receives a total of 5,165 weekly downloads. As such, @contrast/agent-swc-plugin popularity was classified as popular.
We found that @contrast/agent-swc-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.