
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@ecash/browser
Advanced tools
Library for eCash transaction building.
sign callThis library works for both browser and NodeJS.
npm install --save ecash-lib
To use this library, you first have to initialize the WebAssembly module:
import { initWasm } from 'ecash-lib';
await initWasm();
After that, to sign signatures, you need an "Ecc" instance:
import { Ecc } from 'ecash-lib';
const ecc = new Ecc();
Note: You should only call this function once, as it's fairly expensive to setup, it internally precomputes some elliptic curve field elements, which takes some time
Now you're ready to sign your first transactions:
import {
Ecc,
P2PKHSignatory,
Script,
TxBuilder,
fromHex,
initWasm,
shaRmd160,
toHex,
ALL_BIP143,
} from 'ecash-lib';
// Download and compile WebAssembly
await initWasm();
// Build a signature context for elliptic curve cryptography (ECC)
const ecc = new Ecc();
const walletSk = fromHex(
'e6ae1669c47d092eff3eb652bea535331c338e29f34be709bc4055655cd0e950',
);
const walletPk = ecc.derivePubkey(walletSk);
const walletPkh = shaRmd160(walletPk);
const walletP2pkh = Script.p2pkh(walletPkh);
// TxId with unspent funds for the above wallet
const walletUtxo = {
txid: '0000000000000000000000000000000000000000000000000000000000000000',
outIdx: 0,
};
// Tx builder
const txBuild = new TxBuilder({
inputs: [
{
input: {
prevOut: walletUtxo,
signData: {
value: 1000,
outputScript: walletP2pkh,
},
},
signatory: P2PKHSignatory(walletSk, walletPk, ALL_BIP143),
},
],
outputs: [
{
value: 0,
script: new Script(fromHex('6a68656c6c6f')),
},
walletP2pkh,
],
});
const tx = txBuild.sign(ecc, 1000, 546);
const rawTx = tx.ser();
console.log(toHex(rawTx));
slpAmount function D16379Script.fromAddress method to convert cashaddr addresses to ScriptGenesisInfo so that auth and data types match D17194ecashaddrjs and chronik-client installations from npmjs instead of local, to prevent need for peer dependencies D17215Address class for cashaddr and legacy addresses. D17269toHex() method to Script to allow simple conversion to hex string D17527HdNode, entropyToMnemonic, mnemonicToEntropy and mnemonicToSeed to complete wallet functionality D17619mnemonic.ts D17621FAQs
Library for eCash transaction building
We found that @ecash/browser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.