
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@differential-dev/sdk
Advanced tools
This is the official Differential SDK for JavaScript.
Differential allows two or more compute instances to communicate with each other just by calling functions.
This allows you to easily distribute work across multiple machines, and even across multiple processes on the same machine, without having to worry about the underlying communication logic like building a message queue or setting up a REST API.
npm install @differential-dev/sdk
import process from 'process';
import { Differential } from "@differential-dev/sdk";
export const d = Differential({
apiSecret: "sk_excellent_beans_1234",
});
// initialize the communication. this starts listening for queued function calls
d.listen({
asPool: "worker", // this listening process will run as the "worker" worker pool
});
// define any function and wrap it with d.fn to run it in a distributed manner
const helloWorld = d.fn((pid) => {
return `Hello from pid ${process.pid}!`;
}, {
pool: "worker", // this function will only run on workers
})
// call the function as if it were a normal function in the same process
// the SDK will handle the distribution logic
helloWorld(process.pid).then((result) => {
console.log(result);
});
// call d.quit() on process exit to gracefully shut down the SDK
process.on("exit", () => {
d.quit();
});
Counter / Greeter shows how two independent processes can communicate with each other.
API / Worker shows how to create a simple API that offloads work to a worker process that gets executed in the background (set and forget).
FAQs
Javascript SDK for differential.dev
The npm package @differential-dev/sdk receives a total of 0 weekly downloads. As such, @differential-dev/sdk popularity was classified as not popular.
We found that @differential-dev/sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.