Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@dexhunterio/swaps
Advanced tools
npm i @dexhunterio/swaps
import Swap from '@dexhunterio/swaps'
import '@dexhunterio/swaps/lib/assets/style.css'
...
function App() {
return (
<div>
<Swap {...settings} />
</div>
);
}
Prop | Required? | Type | Default | Description |
---|---|---|---|---|
defaultToken | false | string | - | The default token to be selected. |
width | false | px|% | - | The width of the component. Accepts values in pixels or percentage. |
height | false | px|% | - | The height of the component. Accepts values in pixels or percentage. |
theme | false | dark | light | dark | The theme of the component. Can be either 'dark' or 'light'. |
orderTypes | false | array | ['SWAP', 'LIMIT'] | An array of order types supported by the component. Defaults to 'SWAP' and 'LIMIT'. |
supportedTokens | false | tokenId[] | - | An array of token IDs that are supported for searching. |
partnerName | true | string | - | The name of the partner. This is a required field. |
partnerCode | true | string | - | The code of the partner. This is a required field. |
colors | false | object | - | Supported colors: mainText , subText , background , containers , buttonText , accent . |
className | false | string | - | Custom CSS class for the component. |
style | false | object | - | Inline styles for the component. |
onSwapSuccess | false | (data: any) => void | - | Callback function on successful swap. |
onSwapError | false | (err: any) => void | - | Callback function on swap error. |
selectedWallet | false | SelectedWallet | - | The wallet selected by the user. Accepts one of the specified wallet identifiers. Supported wallets: nami , eternl , flint , gerowallet , typhoncip30 , nufi , lace , vespr , begin , and yoroi . |
inputs | false | string[] | - | Input fields for the component. |
onWalletConnect | false | (data: any) => void | - | Callback function when a wallet is connected. |
FAQs
### How to use library (with React)
We found that @dexhunterio/swaps demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.