
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@corca-ai/ads
Advanced tools
Install @corca-ai/ads
with your package manager.
yarn add @corca-ai/ads
npm install @corca-ai/ads
pnpm add @corca-ai/ads
Initialize the class CorcaAds
with your storeId
and customerId
.
You can find storeId
in the account management page.
import { CorcaAds } from "@corca-ai/ads";
const corcaAds = new CorcaAds({ storeId: "...", customerId: "..." });
You can set customerId
to track the user's behavior.
corcaAds.setCustomerId("...");
await corcaAds.onPageView({ productId: "1234" });
await corcaAds.onAddToCart({ productId: "1234", quantity: 1 });
await corcaAds.onPurchase({
orderId: "20231114010101",
amount: 29900,
items: [
{ productId: "1234", quantity: 1 },
],
});
import { corcaAds } from "@corca-ai/ads";
const useCorcaAds = () => {
const [corcaAds, setCorcaAds] = useState<CorcaAds>();
const { me } = useFetchMe();
useEffect(() => {
const corcaAds = new CorcaAds({ storeId: "..." });
setCorcaAds(corcaAds);
}, []);
useEffect(() => {
if (corcaAds && me) {
corcaAds.setCustomerId(me?.id);
}
}, [corcaAds, me]);
return corcaAds;
};
export function ProductDetailPage(props: { params: { productId: string } }) {
const corcaAds = useCorcaAds();
useEffect(() => {
if (corcaAds) {
corcaAds.onPageView({ productId: props.params.productId });
}
}, [corcaAds]);
return (
<div>
...
</div>
);
}
FAQs
## NPM
The npm package @corca-ai/ads receives a total of 0 weekly downloads. As such, @corca-ai/ads popularity was classified as not popular.
We found that @corca-ai/ads demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.