
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@energyweb/issuer-api
Advanced tools
NestJS module for interacting with renewable energy certificates
The Issuer API is a NestJS package that provides restful endpoints for handling Certificate operations (certificate request, issuance, transfer, claiming, revoking).
It is is a component of Energy Web Origin's Traceability SDK.
See contributing.md
EW-Origin is a component of the Energy Web Decentralized Operating System (EW-DOS).
The purpose of EW-DOS is to develop and deploy an open and decentralized digital operating system for the energy sector in support of a low-carbon, customer-centric energy future.
We develop blockchain technology, full-stack applications and middleware packages that facilitate participation of Distributed Energy Resources on the grid and create open market places for transparent and efficient renewable energy trading.
For a deep-dive into the motivation and methodology behind our technical solutions, read our White Papers:
This project is licensed under the MIT License - see the LICENSE file for details
If you decide to use CertificationRequest, then you should also include ScheduleModule.forRoot()
in your application, to run synchronization task.
IssuerApi module by default encrypts supplied platform operator private key using database storage,
and OPERATOR_ENCRYPTION_KEY
environment variable as encryption key for the storage.
If you want to use another signer, make sure to create SignerAdapter
provider,
that implements SignerAdapter
abstract class. This provider can be registered anywhere:
import { SignerAdapter } from '@energyweb/issuer-api`;
class MyCustomSigner implements SignerAdapter {
// ...
}
const signerAdapter = {
provide: SignerAdapter,
useClass: MyCustomSigner,
};
@Module({
providers: [signerAdapter],
imports: [IssuerApi.register()]
})
For migration instructions see changelog.
FAQs
NestJS module for interacting with renewable energy certificates
We found that @energyweb/issuer-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.