
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@howso/amalgam-lang
Advanced tools
Provides a package around [@howso/amalgam](https://github.com/howsoai/amalgam) releases.
Provides a package around @howso/amalgam releases.
Amalgam version: 63.0.0
npm i @howso/amalgam-lang
npm i --save-dev @types/emscripten
We highly suggest the use of a Worker. Create one that can be handed to @howso/engine
.
@/workers/AmalgamWorker
:
import { AmalgamWasmService, initRuntime } from "@howso/amalgam-lang";
import wasmDataUri from "@howso/amalgam-lang/lib/amalgam-st.data?url";
import wasmUri from "@howso/amalgam-lang/lib/amalgam-st.wasm?url";
(async function () {
const svc = new AmalgamWasmService((options) => {
return initRuntime(
options,
{
locateFile: (path: string) => {
// Override file paths so we can use hashed version in build
if (path.endsWith("amalgam-st.wasm")) {
return wasmUri;
} else if (path.endsWith("amalgam-st.data")) {
return wasmDataUri;
}
return self.location.href + path;
},
},
{ logger: console },
);
});
self.onmessage = async (ev) => {
svc.dispatch(ev);
};
self.postMessage({ type: "event", event: "ready" });
})();
Anytime a new release is created in @howso/amalgam package's
amalgam-st.wasm
, update the entire src/webassembly
directory's contents.
In most releases the Amalgam language's interfaces will not change. When it does, update the other files.
Actions are available through GitHub.
FAQs
Provides a package around [@howso/amalgam](https://github.com/howsoai/amalgam) releases.
The npm package @howso/amalgam-lang receives a total of 1 weekly downloads. As such, @howso/amalgam-lang popularity was classified as not popular.
We found that @howso/amalgam-lang demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.