
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@flytio/protos
Advanced tools
See https://developers.google.com/protocol-buffers/docs/overview
First you need to install google's proto buffers on your system and typescript
> brew install protobuf
> yarn install
Documentation for each service
Since there is no protobuf compiler support for TypeScript, we are maintaining the compiled version manually. We are aware that this is a pain, and we'll look to a way of add support to TypeScript, either as our own open source project, or improving the existing plugin (which, at the moment, is not working correctly).
So, when you update proto definitions, you have to:
index.ts
file.CHANGELOG.md
package.json
.After your PR is approved and merged to master
:
If you want to generate protos in go you have to:
Install protobuf using brew: brew install protobuf
Install golang support for protobufs from here: https://github.com/golang/protobuf
Clone https://github.com/flypay/protos-go into the parent directory of this repo
Run this command
> make golang
If make golang
complains that it can not find executable protoc-gen-go
execute the following command from the terminal:
go get -u github.com/golang/protobuf/{proto,protoc-gen-go}
FAQs
Flyt service protos
We found that @flytio/protos demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.