
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@giveth/liquidpledging-contract
Advanced tools
Ethereum contract to delegate donations to projects.
Welcome to the code for the liquidpledging contract, a new way to distribute donated ether while keeping ownership in the hands of the original donor.
git clone https://github.com/GITHUB_USERNAME/liquidpledging.git
cd liquidpledging
Make sure you have NodeJS (v8.4.0 or higher) and npm (5.4.1 or higher) installed.
The liquidpledging contract is published as an npm package for developer convenience. To include it as a dependency in your package.json run this from your apps root dirctory.
npm install liquidpledging --save
Follow the instructions on the liquidpleding-demo repo.
Reach out to us on slack for any help or to share ideas.
FAQs
Liquid Pledging Smart Contract
The npm package @giveth/liquidpledging-contract receives a total of 80 weekly downloads. As such, @giveth/liquidpledging-contract popularity was classified as not popular.
We found that @giveth/liquidpledging-contract demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.