
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
@masa-finance/masa-sdk
Advanced tools
yarn
yarn add @masa-finance/masa-sdk --save
npm
npm i @masa-finance/masa-sdk --save
Browser:
import { Masa } from "@masa-finance/masa-sdk";
import { providers } from "ethers";
// with metamask
const provider = new providers.Web3Provider(window.ethereum);
const signer = provider.getSigner();
// by default Masa SDK will assume the provider points to ethereum mainnet and
// will load contracts accordingly. If you plan to connect to a different network
// the networkName must be specified i.e. like this: networkName: "goerli"
export const masa = new Masa({
signer,
// networkName: "goerli",
});
Node:
import { Masa } from "@masa-finance/masa-sdk";
import { providers, Wallet } from "ethers";
const provider = new providers.JsonRpcProvider("your blockchain rpc endpoint");
const wallet = new Wallet("your private key", provider);
// by default Masa SDK will assume the provider points to ethereum mainnet and
// will load contracts accordingly. If you plan to connect to a different network
// the networkName must be specified i.e. like this: networkName: "goerli"
export const masa = new Masa({
signer: wallet,
// networkName: "goerli",
});
For a detailed interface description see Masa
Key | Type | Description | Default Value |
---|---|---|---|
cookie | string | Cookie value. Don't set this manually unless you know what you do! | |
wallet | ethers.Signer or ethers.Wallet | The Wallet instance to use when interacting with the Blockchain. | "wallet with a random private key" |
apiUrl | string | The API Endpoint of the Masa Infrastructure for dev , test , beta and production. | "https://dev.middleware.masa.finance/" |
environment | string | The environment to use dev , test , beta , production . | "dev" |
network | string | The network name ie. "goerli". | "goerli" |
arweave.host | string | The arweave host to use for loading metadata. | "arweave.net" |
arweave.port | number | The arweave port to use for loading metadata. | 443 |
arweave.protocol | string | The arweave protocol to use for loading metadata. | "https" |
arweave.logging | boolean | Turn arweave logging on or off. | false |
new Masa({
// cookie value for connecting with the backend
cookie: "my fancy cookie",
// wallet object is always mandatory
wallet,
// api endpoint to the masa infrastructure
apiUrl: "https://middleware.masa.finance",
// masa environment dev, test, beta, prod
environment: "prod",
// network name to use goerli, mainnet
network: "goerli",
// arweave endpoint to use
arweave: {
host: "arweave.net",
port: 443,
protocol: "https",
logging: false,
},
});
FAQs
Brand new Masa SDK
The npm package @masa-finance/masa-sdk receives a total of 55 weekly downloads. As such, @masa-finance/masa-sdk popularity was classified as not popular.
We found that @masa-finance/masa-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.