
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@ledgerhq/coin-modules-monitoring
Advanced tools
A monitoring tool that measures the performance of cryptocurrency modules in the Ledger Live ecosystem. It tracks scan and sync operations across different blockchain networks, measuring execution time, network calls, CPU usage, and memory consumption.
This module helps the Ledger team monitor and optimize the performance of cryptocurrency integrations by:
# Install dependencies
pnpm install
# Build Ledger Live Common
# (You need to be at the root of the LedgerLive project to run this command)
pnpm build:llc
# Build the project
pnpm build
Monitor specific currencies:
pnpm start monitor --currencies bitcoin,ethereum,solana --account-types pristine,average,big
Monitor all supported currencies on every account type:
pnpm start monitor
or
pnpm start monitor --currencies all --account-types pristine,average,big
Run monitoring in isolated mode
pnpm start monitor --currencies algorand --isolated
| Option | Description | Default | Example |
|---|---|---|---|
-c, --currencies <currencies> | (Optional) Comma-separated list of currencies to monitor | all | bitcoin,ethereum,solana |
-t, --account-types <types> | (Optional) Comma-separated account types to test | pristine,average,big | pristine,big |
-i, --isolated | (Optional) Flag to run each currency/account combination in isolated processes | false (meaning no flag) | --isolated (for true) |
The tool tests three different account types to measure performance across various scenarios:
pristine: Accounts with a few transaction in historyaverage: Accounts with moderate transaction in historybig: Accounts with a lot of transactions in historyThe module supports the following cryptocurrencies:
The tool provides detailed performance metrics:
[1 / 6] ✅ Completed in 2.3s
┌─ 🔎 Scan
│ • Calls: Total: 3 - api.etherscan.io: 2 - api.coingecko.com: 1
│ • CPU : min=0.1%, median=0.2%, max=0.5%, p90=0.4%, p99=0.5%
│ • MEM : min=45.2 MB, median=47.1 MB, max=48.9 MB, p90=48.5 MB, p99=48.8 MB
└─ 🔄 Sync
• Calls: Total: 1 - api.etherscan.io: 1
• CPU : min=0.0%, median=0.1%, max=0.2%, p90=0.2%, p99=0.2%
• MEM : min=0 MB, median=0 MB, max=0 MB, p90=0 MB, p99=0 MB
| Variable | Description | Required | Default |
|---|---|---|---|
DD_API_KEY | Datadog API key for metrics submission | No | - |
DD_APP_KEY | Datadog application key | No | - |
DD_DOMAIN | Datadog site domain | No | datadoghq.eu |
SUBMIT_LOGS | Enable/disable log submission to Datadog | No | - |
When SUBMIT_LOGS environment variable is set, the tool automatically submits performance metrics to Datadog with the following structure:
{
"duration": 1234,
"currencyName": "ethereum",
"coinModuleName": "ethereum",
"operationType": "scan",
"accountType": "average",
"transactions": 42,
"accountAddressOrXpub": "0x...",
"totalNetworkCalls": 3,
"networkCallsByDomain": {
"api.etherscan.io": 2,
"api.coingecko.com": 1
},
"cpu": { "min": 0.1, "median": 0.2, "max": 0.5, "p90": 0.4, "p99": 0.5 },
"memory": { "min": 45.2, "median": 47.1, "max": 48.9, "p90": 48.5, "p99": 48.8 }
}
FAQs
Push monitoring metrics to Datadog
The npm package @ledgerhq/coin-modules-monitoring receives a total of 583 weekly downloads. As such, @ledgerhq/coin-modules-monitoring popularity was classified as not popular.
We found that @ledgerhq/coin-modules-monitoring demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.