Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@groupos/react-auth
Advanced tools
`@groupos/smart-accounts` is a package for onboarding new users to an app by giving them a smart account. The package wraps [wagmi](https://wagmi.sh/) so you can use the same core hooks for web3 development, but now with easy smart account integrations fo
@groupos/smart-accounts
is a package for onboarding new users to an app by giving them a smart account. The package wraps wagmi so you can use the same core hooks for web3 development, but now with easy smart account integrations for your users.
You will need an account on GroupOS in order to use the package. After signing in with your wallet, you will be redirected to your Group dashboard. Go to Settings -> General and copy your groupId
. Next go to Allowed Domains and add the domain of your project to the allow list.
From the root of the project that is consuming the package type the following to install the package.
npm install @groupos/smart-accounts
import { SmartAccountModal } from "@groupos/smart-accounts";
<SmartAccountModal groupId="STATION_GROUP_ID" />;
The component lets users login with regular connectors that you have configured in your wagmi config (Coinbase wallet, metamask, etc) or your users can login with email. If they choose to login with email, they will be sent a one time password. When they confirm the one time password, a cloud wallet will be created for them behind the scenes, and wagmi will connect to this account.
The suggested way to use the component is as a “login” component. If wagmi does not find an account, you should render the component. Otherwise, if wagmi does find an account, you can render the rest of your app. See the following as an example.
import { WagmiConfig, createConfig, useAccount, http } from "wagmi";
import { mainnet } from "wagmi/chains";
import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
import { SmartAccountModal } from "@groupos/smart-accounts";
const config = createConfig({
chains: [mainnet],
transports: {
[mainnet.id]: http("https://mainnet.example.com"),
},
});
const queryClient = new QueryClient();
export default function App() {
const account = useAccount();
return (
<WagmiProvider config={config}>
<QueryClientProvider client={queryClient}>
<Auth />
</QueryClientProvider>
</WagmiProvider>
);
}
function Auth() {
const account = useAccount();
return (
<main>
{!account?.address ? (
<SmartAccountModal groupId="STATION_GROUP_ID" />
) : (
<div>This is the rest of the app!</div>
)}
</main>
);
}
FAQs
`@groupos/smart-accounts` is a package for onboarding new users to an app by giving them a smart account. The package wraps [wagmi](https://wagmi.sh/) so you can use the same core hooks for web3 development, but now with easy smart account integrations fo
We found that @groupos/react-auth demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.