
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@ethf/app
提供了 App
基类,用于创建 Ethf
应用。
pnpm i @ethf/app
import { createApp, createAppPlugin } from '@ethf/app'
const plugin = createAppPlugin(
base => class extends base {
a: number = 10
printA() {
console.log(`a = ${this.a}`)
}
}
)
const app = createApp([ plugin ])
app.printA() // expect to be 'a = 10'
app.a = 20
app.printA() // expect to be 'a = 20
App
所有 EthF
应用的基类。注意,App
对象本身没有提供任何方法,所有的功能由插件实现。
AppPlugin<T>
App
对象上插件的类型,T
通常可以通过自动推断得出。
createAppPlugin(plugin: AppPlugin): AppPlugin
其本质是一个 id
函数,为 plugin
提供类型注解。
createApp(plugins: Plugins): MergePlugins<App, Plugins>
createApp
函数用于根据插件创建出添加插件之后 App
对象的实例。
FAQs
`@ethf/app` 提供了 `App` 基类,用于创建 `Ethf` 应用。
We found that @ethf/app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.