Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@hanchon/evmos-ts-wallet
Advanced tools
Evmos ts/js wallet to sign and broadcast messages created with evmosjs
Evmos ts/js wallet to sign and broadcast messages created with evmosjs
yarn add @hanchon/evmos-ts-signer
Some constants are exported as helpers but the values may not be updated for the current state of the network:
The constants for fee
and chain
should be updated by the user to follow the network upgrade and the fee changes, I'll try to keep it up to date, but probably you want to control this values in your code.
Both getSender
and brodcast
should set the option parameter called url
, this should be pointing to the port 1317
of your node or a public rest endpoint. By default is using localhost:1317
.
Both signing
functions have the optional parameter broadcastMode
that by default is BROADCAST_MODE_BLOCK
.
import { Wallet } from "@ethersproject/wallet"
import { createMessageSend } from "@tharsis/transactions"
import { broadcast, getSender, LOCALNET_CHAIN, LOCALNET_FEE, signTransaction } from "@hanchon/evmos-ts-signer"
(async () => {
const privateMnemonic =
'pluck view carry maid bamboo river major where dutch wood certain oval order wise awkward clerk adult summer because number raven coil crunch hat'
const wallet = Wallet.fromMnemonic(privateMnemonic)
const sender = await getSender(wallet)
const txSimple = createMessageSend(
LOCALNET_CHAIN,
sender,
LOCALNET_FEE,
'',
{
destinationAddress: 'evmos1pmk2r32ssqwps42y3c9d4clqlca403yd9wymgr',
amount: '1',
denom: 'aevmos',
},
)
const resKeplr = await signTransaction(wallet, txSimple)
const broadcastRes = await broadcast(resKeplr)
if (broadcastRes.tx_response.code === 0) {
console.log('Success')
} else {
console.log('Error')
}
})()
import { Wallet } from "@ethersproject/wallet"
import { createMessageSend } from "@tharsis/transactions"
import { broadcast, getSender, LOCALNET_CHAIN, LOCALNET_FEE, singTransactionUsingEIP712 } from "@hanchon/evmos-ts-signer"
(async () => {
const privateMnemonic =
'pluck view carry maid bamboo river major where dutch wood certain oval order wise awkward clerk adult summer because number raven coil crunch hat'
const wallet = Wallet.fromMnemonic(privateMnemonic)
const sender = await getSender(wallet)
const txSimple = createMessageSend(
LOCALNET_CHAIN,
sender,
LOCALNET_FEE,
'',
{
destinationAddress: 'evmos1pmk2r32ssqwps42y3c9d4clqlca403yd9wymgr',
amount: '1',
denom: 'aevmos',
},
)
const resMM = await singTransactionUsingEIP712(
wallet,
sender.accountAddress,
txSimple,
)
const broadcastRes = await broadcast(resMM)
if (broadcastRes.tx_response.code === 0) {
console.log('Success')
} else {
console.log('Error')
}
})()
getSender
function will throw an error.getSender
function should be called before sending each transaction to update the nonce or manually increment the value in the sender object.v2
that is limited but should work without enforcing ESM
. In src/helper.ts
there is a basic implementation of fetch
and post
that can be used to replace node-fetch
, in case that lib is not working for your case)FAQs
Evmos ts/js wallet to sign and broadcast messages created with evmosjs
The npm package @hanchon/evmos-ts-wallet receives a total of 38 weekly downloads. As such, @hanchon/evmos-ts-wallet popularity was classified as not popular.
We found that @hanchon/evmos-ts-wallet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.