
Research
/Security News
Toptal’s GitHub Organization Hijacked: 10 Malicious Packages Published
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
@geekcash/geekcash-p2p
Advanced tools
bitcore-p2p-dash
adds Dash protocol support for Bitcore-Dash.
See the main bitcore-dash repo for more information.
npm install bitcore-p2p-dash
In order to connect to the Dash network, you'll need to know the IP address of at least one node of the network, or use Pool to discover peers using a DNS seed.
var Peer = require('bitcore-p2p-dash').Peer;
var peer = new Peer({host: '127.0.0.1'});
peer.on('ready', function() {
// peer info
console.log(peer.version, peer.subversion, peer.bestHeight);
});
peer.on('disconnect', function() {
console.log('connection closed');
});
peer.connect();
Then, you can get information from other peers by using:
// handle events
peer.on('inv', function(message) {
// message.inventory[]
});
peer.on('tx', function(message) {
// message.transaction
});
Take a look at the bitcore guide on the usage of the Peer
class.
See CONTRIBUTING.md on the main bitcore-dash repo for information about how to contribute.
Code released under the MIT license.
Copyright 2013-2015 BitPay, Inc. Bitcore is a trademark maintained by BitPay, Inc.
FAQs
Interface to the dash P2P network for geekcash
We found that @geekcash/geekcash-p2p demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
Research
/Security News
Socket researchers investigate 4 malicious npm and PyPI packages with 56,000+ downloads that install surveillance malware.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.