
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@evan.network/api-blockchain-core
Advanced tools
The blockchain core is a helper library, that offers helpers for interacting with the blockchain. It is written in TypeScript and offers several (up to a certain degree) stand-alone modules, that can be used for
This project is bundled using browserify and directly loadable from dapps within the evan.network. The dbcp.json can be found in this wrapping project.
It's also available as browserified project within the npm, published with the same original versions: @evan.network/api-blockchain-core-browserified.
The tests are written with mocha and chai and the files (*.spec.js) are located next to the files, they contain tests for.
The tests are in between unit tests and integration tests. They each cover a single class but do not mock external dependencies and use the live blockchain for its contract and transaction related components. They act as a living documentation and examples for using the modules can be found in them.
As the modules depend on each other, most tests require some repeating initialization steps. To speed things up a bit, the TestUtils class is used for creating the modules, this class initializes the required modules, but creates multiple instances of the same modules. This pattern can be used for tests, but when writing code intended for productive use, modules should be re-used instead of creating new ones repeatedly.
There are multiple scripts for running tests:
npm run test - runs all tests, only recommended when running during CI, takes really long by nownpm run testunit ${PATH_TO_SPEC_FILE} - runs a single *.spec.js file, your best friend when writing new modules or upating themnpm run testunitbail ${PATH_TO_SPEC_FILE} - runs a single *.spec.js file, breaks on first error without waiting for all tests in this file to finishnpm run testunitbrk ${PATH_TO_SPEC_FILE} - runs a single *.spec.js file, steps into breakpoint on first line, can be used when facing startup issuesAll tests are run with the --inspect flag for debugging.
FAQs
blockchain interaction core library
We found that @evan.network/api-blockchain-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.