
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
@lared/lared-node-bootstrap
Advanced tools
Symbol tool that allows you creating, configuring and running LaRed node
Symbol CLI tool that allows you creating, configuring and running Symbol's complete networks or nodes to be sync with existing networks.
Yaml files that define the configuration and layout of the network and nodes. It defines how many nodes, database, rest gateways, the modes, keys, etc.
Presets are defined at 4 levels from general to specific:
testnet.testnet peer, tesnet dual, testnet api.Properties in each file override the previous values (by object deep merge).
-p testnet -a peer: A harvesting peer node that connects to the current public testnet. Nemesis block is copied over.-p testnet -a api: A api peer node that connects to the current public testnet running its own mongo database and rest gateway. Nemesis block is copied over.-p testnet -a dual: A dual haversting peer node that connects to the current public testnet running its own mongo database and rest gateway. Nemesis block is copied over.The folder where the generated config, docker files and data are stored. The folder structure is:
./preset.yml: the final generated preset.yml that it's used to configure bootstrap, the nodes, docker, etc../addresses.yml: randomly generated data that wasn't provided in the preset. e.g.: SSL keys, nodes' keys, nemesis accounts, generation hash seed, etc../nodes: it holds the configuration, data and logs for all the defined node instances../gateways: it holds the configuration and logs for all the defined node rest gateways../nemesis: The folder used to hold the nemesis block. Block 1 data is generated via nemgen tool for new networks. For existing network, it is copied over../databases: the location where the mongo data is stored for the different database instances../docker: the generated docker-compose.yml, mongo init scripts and server basic bash scripts../reports: the location of the generated reports.Validate your environment by running:
node -v
docker -v
docker-compose -v
Check your user can run docker without sudo:
docker run hello-world
If you see an error like:
Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock
Please follow this guide.
It's recommended to run the commands from en empty working dir.
The network configuration, data and docker files will be created inside the target folder ('./target') by default.
mkdir my-networks
cd my-networks
Once in the working dir:
$ npm install -g @lared/lared-node-bootstrap
$ lared-node-bootstrap COMMAND
running command...
$ lared-node-bootstrap (-v|--version|version)
@lared/lared-node-bootstrap/0.4.2 win32-x64 node-v12.19.0
$ lared-node-bootstrap --help [COMMAND]
USAGE
$ lared-node-bootstrap COMMAND
...
The general usage would be:
lared-node-bootsrap config -p testnet -a dual
lared-node-bootsrap compose
lared-node-bootsrap run
If you need to start fresh, you many need to sudo remove the target folder (docker volumes dirs may be created using sudo). Example:
sudo rm -rf ./target
If you want to contribute to this tool, clone this repo and run:
npm install -g
Then, lared-node-bootsrap runs from the source code. You can now try your features after changing the code.
Pull Requests are appreciated! Please follow the contributing guidelines.
Note: cloning this repo is only for people that want to tune the tool in a way it cannot be configured. If this is your case, please provide a feature request. General users should install this tool like any other node module.
lared-node-bootsrap clean - It removes the target folder deleting the generated configuration and datalared-node-bootsrap compose - It generates the docker-compose.yml file from the configured network.lared-node-bootsrap config - Command used to set up the configuration files and the nemesis block for the current networklared-node-bootsrap enrolSupernode - It enrols the nodes in the supernode rewards program by announcing the enrol transaction to the registration address.lared-node-bootsrap healthCheck - It checks if the services created with docker compose are up and running.lared-node-bootsrap help - display help for lared-node-bootsraplared-node-bootsrap link - It announces VRF and Voting Link transactions to the network for each node with 'Peer' or 'Voting' roles. This command finalizes the node registration to an existing network.lared-node-bootsrap report - it generates reStructuredText (.rst) reports describing the configuration of each node.lared-node-bootsrap resetData - It removes the data keeping the generated configuration, certificates, keys and block 1.lared-node-bootsrap run - It boots the network via docker using the generated docker-compose.yml file and configuration. The config and compose methods/commands need to be called before this method. This is just a wrapper for the docker-compose up bash call.lared-node-bootsrap start - Single command that aggregates config, compose and run in one line!lared-node-bootsrap stop - It stops the docker-compose network if running (lared-node-bootsrap started with --detached). This is just a wrapper for the docker-compose down bash call.FAQs
LaRed tool that allows you creating, configuring and running Lared's networks
The npm package @lared/lared-node-bootstrap receives a total of 12 weekly downloads. As such, @lared/lared-node-bootstrap popularity was classified as not popular.
We found that @lared/lared-node-bootstrap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.