
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@dedot/merkleized-metadata
Advanced tools
Merkleized Metadata Utilities - Implementing the RFC-0078 Merkleized Metadata specification.
This package provides utilities for:
import { DedotClient, WsProvider } from 'dedot';
import { MerkleizedMetadata } from 'dedot/merkleized-metadata';
// Create a dedot client
const client = await DedotClient.new(new WsProvider('wss://rpc.polkadot.io'));
// Get metadata from the client
const metadata = client.metadata;
// Define chain-specific information
const chainInfo = {
// These can be omitted as they'll be fetched from metadata
// specVersion: client.runtimeVersion.specVersion,
// specName: client.runtimeVersion.specName,
// ss58Prefix: 0, // Polkadot
// These are required
decimals: 10,
tokenSymbol: 'DOT'
};
// Create a merkleizer instance
const merkleizer = new MerkleizedMetadata(metadata, chainInfo);
// Calculate metadata hash
const hash = merkleizer.digest();
console.log('Metadata Hash:', hash);
import { MerkleizedMetadata } from 'dedot/merkleized-metadata';
// Create a merkleizer instance
const merkleizer = new MerkleizedMetadata(metadata, chainInfo);
// Generate proof for an extrinsic
const extrinsicHex = '0x...'; // Hex-encoded extrinsic
const proof = merkleizer.proofForExtrinsic(extrinsicHex);
// Generate proof for extrinsic payload
const txPayload = '0x...'; // Hex-encoded extrinsic payload
const proof3 = merkleizer.proofForExtrinsicPayload(txPayload);
// Generate proof for extrinsic parts
const callData = '0x...'; // Hex-encoded call data
const includedInExtrinsic = '0x...'; // Hex-encoded extrinsic extra
const includedInSignedData = '0x...'; // Hex-encoded signed extra
const proof2 = merkleizer.proofForExtrinsicParts(callData, includedInExtrinsic, includedInSignedData);
MerkleizedMetadataMain class for calculating metadata hashes and generating proofs.
Constructor: new MerkleizedMetadata(metadata, chainInfo)
metadata: Metadata object, hex string, or Uint8ArraychainInfo: Chain-specific information (some fields can be omitted as they'll be fetched from metadata)Methods:
digest(): Calculate metadata hash and return as Uint8ArrayproofForExtrinsic(extrinsic, additionalSigned?): Generate proof for an extrinsicproofForExtrinsicPayload(txPayload): Generate proof for extrinsic payloadproofForExtrinsicParts(callData, includedInExtrinsic, includedInSignedData): Generate proof for extrinsic partsApache-2.0
FAQs
RFC-0078 Merkleized Metadata Implementation
The npm package @dedot/merkleized-metadata receives a total of 511 weekly downloads. As such, @dedot/merkleized-metadata popularity was classified as not popular.
We found that @dedot/merkleized-metadata demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.