
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@dedot/providers
Advanced tools
JSON-RPC Providers
WsProvider)Custom HTTP headers can be sent along with the websocket opening handshake, e.g: to authenticate with a private RPC endpoint or proxy.
import { WsProvider } from '@dedot/providers';
const provider = new WsProvider({
endpoint: 'wss://private.rpc',
headers: {
Authorization: `Bearer ${process.env.API_TOKEN}`,
'X-Client-ID': 'example-client',
},
});
Headers can also be resolved on each connection attempt (including reconnects), which is helpful to refresh short-lived tokens or to use different credentials per endpoint:
const provider = new WsProvider({
endpoint: ['wss://private.rpc', 'wss://private-backup.rpc'],
headers: async ({ attempt, currentEndpoint }) => ({
Authorization: `Bearer ${await fetchToken(currentEndpoint)}`,
}),
});
[!NOTE] Custom headers are only supported in non-browser environments (Node.js, Bun). Browsers do not allow setting headers for the websocket opening handshake, the headers are ignored and a warning is logged in that case.
FAQs
JSON-RPC Providers
The npm package @dedot/providers receives a total of 662 weekly downloads. As such, @dedot/providers popularity was classified as not popular.
We found that @dedot/providers demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.