
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@dzlzv/hydra-typegen
Advanced tools
Hydra Typegen is a code generation tool for creating Typescript types for substrate events and extrinsics. Its primary use-case is to provide type-safe interfaces for Hydra mappings. For example, once a typescript class for the Balances.Transfer event is generated, a mapping can look like
export async function balancesTransfer(
db: DatabaseManager,
_event: SubstrateEvent
) {
const event = new Balances.TransferEvent(_event);
const transfer = new Transfer()
transfer.from = Buffer.from(event.data.accountIds[0].toHex())
transfer.to = Buffer.from(event.data.accountIds[1].toHex())
transfer.value = event.data.balance.toBn()
transfer.block = event.ctx.blockNumber
transfer.comment = `Transferred ${transfer.value} from ${transfer.from} to ${transfer.to}`
console.log(`Saving ${JSON.stringify(transfer, null, 2)}`)
await db.save<Transfer>(transfer)
}
hydra-typegen help [COMMAND]display help for hydra-typegen
USAGE
$ hydra-typegen help [COMMAND]
ARGUMENTS
COMMAND command to show help for
OPTIONS
--all see all commands in CLI
See code: @oclif/plugin-help
hydra-typegen typegen [CONFIG]Generate Typescript classes for the Substrate events
USAGE
$ hydra-typegen typegen [CONFIG]
ARGUMENTS
CONFIG Path to YML config file. Overrides the flag options
OPTIONS
-c, --calls=calls Comma-separated list of substrate calls in the format <module>.<name>
-d, --debug Output debug info
-e, --events=events Comma-separated list of substrate events in the formation <module>.<name>
-h, --blockHash=blockHash Hash of the block from which the metadata will be fetched. Only applied if metadata is
pulled via an RPC call
-i, --typelib=typelib A JavaScript module from which the custom types should be imported, e.g.
'@joystream/types/augment'
-m, --metadata=metadata [default: metadata.json] Chain metadata source. If starts with ws:// or wss:// the metadata
is pulled by an RPC call to the provided endpoint. Otherwise a relative path to a json file
matching the RPC call response is expected
-o, --outDir=outDir [default: generated/types] A relative path the root folder where the generated files will
be generated
-s, --[no-]strict Strict mode. If on, the generated code throws an error if the input event argument types
don't much the metadata definiton
-t, --typedefs=typedefs A relative path to a file with JSON definitions for custom types used by the chain
See code: src/commands/typegen/index.ts
A full sample Hydra project can be found here
A minimal example for generating classes for the Balances.Transfer and Treasury.Deposit events in Kusama:
hydra-typegen typegen --metadata wss://kusama-rpc.polkadot.io Balances.Transfer,Treasury.Deposit
It is also possible to run hydra-typegen against a manifest file:
hydra-typegen typegen typegen.yml --debug
The config file typegen.yml can look like this:
# Typegen will pull the metadata from Kusama at block with the given hash
metadata:
source: wss://kusama-rpc.polkadot.io
blockHash: '0x45eb7ddd324361adadd4f8cfafadbfb7e0a26393a70a70e5bee6204fc46af62e'
# events and calls for which the typescript types will be generated
events:
- Balances.Transfer
calls:
- Balances.transfer
outDir: ./generated
Hydra-typegen also supports config files like the one below:
metadata:
source: wss://kusama-rpc.polkadot.io
blockHash: '0x45eb7ddd324361adadd4f8cfafadbfb7e0a26393a70a70e5bee6204fc46af62e'
events:
- Balances.Transfer
calls:
- Balances.transfer
outDir: ./generated
Simply run hydra-typegen <path-to-config-file>
Hydra Typegen supports custom substrate types via the --typedefs flag. The provided .json file should include type definitions
for the arguments and parameters of the events and extrinsics to be generated. The type definitions file is copied to the generated sources.
In the config file, place the definition into the customTypes section. It assumes that all the custom runtime types are already available for import from a library, so that e.g. the generated import statement
import { MyCustomRuntimeClass } from 'my/types/definitions
is correctly resolved.
...
customTypes:
lib: <from where the custom types are imported>,
typedefs: <path to a json file with custom runtime types definitions>,
FAQs
"Hydra-cli pluging for generating typed events"
The npm package @dzlzv/hydra-typegen receives a total of 826 weekly downloads. As such, @dzlzv/hydra-typegen popularity was classified as not popular.
We found that @dzlzv/hydra-typegen demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.