
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@flipflop-sdk/cli
Advanced tools
A command-line interface for Flipflop token operations.
npm install -g @flipflop-sdk/cli
The CLI supports two ways to provide your keypair:
--keypair-bs58
with your private key in base58 format--keypair-file
with path to a JSON file containing your private key as an array of 64 numbersNote: If both parameters are provided, --keypair-file
takes priority.
flipflop launch --name "MyToken" --symbol "MTK" --keypair-file ./keypair.json --rpc <your_rpc_url>
# or
flipflop launch --name "MyToken" --symbol "MTK" --keypair-bs58 "your_base58_private_key" --rpc <your_rpc_url>
flipflop set-urc --mint <mint_address> --urc "mycode" --keypair-file ./keypair.json --rpc <your_rpc_url>
# or
flipflop set-urc --mint <mint_address> --urc "mycode" --keypair-bs58 "your_base58_private_key" --rpc <your_rpc_url>
flipflop mint --mint <mint_address> --urc "mycode" --keypair-file ./keypair.json --rpc <your_rpc_url>
# or
flipflop mint --mint <mint_address> --urc "mycode" --keypair-bs58 "your_base58_private_key" --rpc <your_rpc_url>
flipflop display-mint --mint <mint_address> --rpc <your_rpc_url>
flipflop display-urc --urc "mycode" --rpc <your_rpc_url>
flipflop system-config --rpc <your_rpc_url>
Displays comprehensive system configuration including:
flipflop metadata --name "MyToken" --symbol "MTK" --description "My awesome token" --image-path ./token-image.png --rpc <your_rpc_url>
Uploads token metadata (including image) and returns the metadata URI for use in token creation.
The keypair file should be a JSON file containing an array of 64 numbers representing your private key:
[174, 47, ..., 238, 135]
--rpc <url>
: RPC endpoint (default: https://api.mainnet-beta.solana.com)--keypair-bs58 <bs58>
: Keypair in base58 format--keypair-file <path>
: Path to keypair file (JSON array format)--name <name>
: Token name (required)--symbol <symbol>
: Token symbol (required)--uri <uri>
: Token metadata URI (optional)--token-type <type>
: Token type - meme or standard (default: meme)--mint <address>
: Mint account address (required)--urc <code>
: URC referral code (required)--mint <address>
: Mint account address (required)--urc <code>
: URC referral code (required)--mint <address>
: Mint account address (for display-mint)--urc <code>
: URC code (for display-urc)--name <name>
: Token name (required)--symbol <symbol>
: Token symbol (required)--description <description>
: Token description (required)--image-path <path>
: Path to image file (required)This CLI tool uses the following key libraries:
@flipflop-sdk/node
: Core FlipFlop SDK functionality@solana/web3.js
: Solana blockchain interaction@coral-xyz/anchor
: Solana program frameworkcommander
: Command-line interface frameworkdecimal.js
: Precise decimal arithmeticbs58
: Base58 encoding/decodingFor issues and questions, please visit our GitHub repository.
FAQs
FlipFlop CLI tool for common operations
The npm package @flipflop-sdk/cli receives a total of 62 weekly downloads. As such, @flipflop-sdk/cli popularity was classified as not popular.
We found that @flipflop-sdk/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.