Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@crypto/contract
Advanced tools
$ npm install -g @crypto/contract
# print all available options
$ contract -h
# specify a contract file and enter prompt mode
$ contract -f <path_to_file>
# additionally specify the RPC host and port
$ contract -h amazing.com -p 9999 -f <path_to_file>
If omitted host defaults to
localhost
and port defaults to6767
.
# compile the contract
contract$ compile
# deploy the contract
contract$ deploy
# additionally set the account address to use when deploying
contract$ deploy -a <account_address>
If omitted account address defaults to the first account
web3.eth.accounts[0]
.
# additionally set the gas amount to use when deploying
contract$ deploy -g <gas_amount>
If omitted the gas amount defaults to
1000000
.
# instantiate the contract
contract$ init -a <contract_address>
# set contract instance name
contract$ name <name>
# enter interactive REPL mode
contract$ <name>
# execute contract specific methods
contract$ name: newDocument('hash', {from: web3.eth.coinbase, gas: 1800000})
# subscribe for specific event
contract$ notereth$ DocumentEvent({}, {fromBlock: 0, toBlock: 'latest'}).watch
# subscribe for all events
contract$ notereth$ allEvents({}, {fromBlock: 0, toBlock: 'latest'}).watch
# specify contract file
$ contract -f <path_to_file>
# deploy the contract using the first unlocked account
contract$ deploy
# set contract instance name
contract$ name notereth
# enter contract interactive REPL
contract$ notereth
# execute methods from that contract
notereth$ notereth: newDocument('hash', {from: web3.eth.coinbase, gas: 1800000})
# instantiate the contract in two separate console windows at the same time
$ contract -f <path_to_file>
contract$ init -a 0x241bbd0ef9492aa17866c662b750f24003c812c6
contract$ name notereth
contract$ notereth
contract$ notereth:
# set a watcher in the first console window
contract$ notereth$ DocumentEvent({}, {fromBlock: 0, toBlock: 'latest'}).watch
Notice that the callback for the
watch
method is missing.
# execute some command in the second console window
contract$ notereth$ newDocument('hash', {from: web3.eth.coinbase, gas: 1800000})
FAQs
Ethereum Contract Tools
The npm package @crypto/contract receives a total of 0 weekly downloads. As such, @crypto/contract popularity was classified as not popular.
We found that @crypto/contract demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.