
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@datafund/data-receipt
Advanced tools
DataReceipt library uses fds.js library to send consent receipt files over Swarm to another account
A helper library to create FDS accounts, create Consent Receipts JWT tokens, send them over Swarm, decode and verify tokens with additional layer to support Consent Manager smart contract and consent signing and verification of Consent smart contract on blockchain.
DataReceipt.js library uses fds.js library to send consent receipt files over Swarm to another account ** BEWARE ** uses FDS.js multibox branch https://github.com/fairDataSociety/fds.js/tree/multibox
you need to provide FDS object in window.FDS property for fds.js and datareceipt.js to work with Noordung blockchain
View network: https://noordung.fairdatasociety.org/
Block explorer: https://blockscout.noordung.fairdatasociety.org/
window.FDS = new FDS({
swarmGateway: 'https://swarm.fairdatasociety.org',
ethGateway: 'https://geth-noordung.fairdatasociety.org',
faucetAddress: 'https://dfaucet-testnet-prod.herokuapp.com/gimmie',
httpTimeout: 1000,
gasPrice: 0.1,
ensConfig: {
domain: 'datafund.eth',
registryAddress: '0xc11f4427a0261e5ca508c982e747851e29c48e83',
fifsRegistrarContractAddress: '0x01591702cb0c1d03b15355b2fab5e6483b6db9a7',
resolverContractAddress: '0xf70816e998819443d5506f129ef1fa9f9c6ff5a7'
},
// multibox extension
applicationDomain: "/shared/consents/"
});
let fd = new DataReceiptLib();
let password = 'test';
let accountName = 'testAccountName123123';
let subjectName = 'testAccountName1231234';
let newAccount = await fd.createAccount(accountName, password);
let account = await fd.unlockAccount(accountName, password);
let loadPrivKey = await fd.loadPrivateKey(privateKey);
let loadSuccess = await fd.loadProject(project);
let signedToken = await fd.generateToken();
let swarmHash = await fd.sendDataReceipt(signedToken, subjectName);
where is cr.jwt stored?
let userAddress = fd.account.address;
let subjectAddress = await fd.account.getAddressOf(subjectName);
let CM = await fd.getConsentManager();
let tx = await CM.createConsent(userAddress, subjectAddress, "0x" + swarmHash);
once transaction is finished
let uc = await CM.getUserConsents();
let sc = await CM.getSubjectConsents();
let cf = await CM.getConsentsFor("0x" + swarmHash);
let consent = await fd.getConsent(uc[uc.length - 1]);
let location = consent.swarmHash;
let us = await consent.isUserSigned();
await consent.signUser();
let ss = await consent.isSubjectSigned();
await consent.signSubject();
let tx = await CM.updateConsent(prevConsentAddress, "0x" + swarmHash);
let uc = await CM.getUserConsents();
await fd.asyncForEach(uc, async (consentAddress) => { ... }
let consent = await fd.getConsent(consentAddress);
let us = await consent.isUserSigned();
let ss = await consent.isSubjectSigned();
let s = await consent.isSigned();
letv = await consent.isValid();
if updated anything else than 0x0000000000000000000000000000000000000000 then consent was updated with another consent.
let updated = await consent.isUpdatedWith();
Return values
0 - waiting for signatures
1 - active
2 - expired
3 - revoked
status = await consent.status();
let messages = await fd.getReceivedMessages(true);
FAQs
DataReceipt library uses fds.js library to send consent receipt files over Swarm to another account
We found that @datafund/data-receipt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.