Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@ethersproject/experimental
Advanced tools
Experimental libraries for ethers. These should not be considered stable.
This package is a collection of quick little ideas, which may be half-baked.
If you find a particular feature piques your interest, please feel free to open an issue on GitHub to discuss it.
Also, if you have any system that requires an object from this package, make sure you specify the exact npm version in your package.json, as backwards compatibility is NOT guaranteed for this package; APIs may change and classes may disappear.
BrainWallet
In general, a Brain Wallet is not recommended, but it is a feature we offered in v3 and below. It allows a wallet to be described and recovered using a username and a password. However, anyone who can guess a username and password can steal the funds, and the password cannot be changed. But for backwards compatibility and for simple testing, we provide it here.
import { BrainWallet } from "@ethersproject/experimental/brain-wallet";
// This is optional, but since a Brain Wallet can take 5-10s to generate,
// helps keep your users informed
function showProgress(percent) {
if (percent === 1) {
console.log("Done.");
} else {
console.log("Completed: " + Math.trunc(100 * percent) + "%");
}
}
// Generate a legacy-compatible Brain Wallet
BrainWallet.generateLegacy(username, password, showProgress).then((wallet) => {
console.log(wallet);
});
// Generate a new-style Brain Wallet, which contains a Mnemonic Phrase too
BrainWallet.generate(username, password, showProgess).then((wallet) => {
console.log(wallet);
});
NonceManager
import { NonceManager } from "@ethersproject/experimental/nonce-manager";
let signer = "... any way you get a signer ...";
// The NonceManager Signer will automatically manage the nonce for you
// so you may blast the network with as many transactions as you would
// like. Transactions which have not been mined within XXX timeout and
// will be rebroadcast; keep in mind that unmined transactions remain
// in memory.
const managedSigner = new NonceManager(signer);
Eip1193Bridge
import { Eip1193Bridge } from "@ethersproject/experimental/retry-provider";
const signer = "... any way you get an ethers Signer...";
const provider = "... any way you get an ethers Provider...";
const eip1193Provider = new Eip1193Provider(signer, provider);
MIT License.
FAQs
Experimental libraries for ethers. These should not be considered stable.
The npm package @ethersproject/experimental receives a total of 37,429 weekly downloads. As such, @ethersproject/experimental popularity was classified as popular.
We found that @ethersproject/experimental demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.