
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@mxenabled/mxui
Advanced tools
In order to run the project you will need to make sure that you have yarn installed. It must be higher than 1.22 in order to do that you must have corepack enabled. Do not just run "npm i" to install dependencies, all packages must be installed with yarn.
yarn
or yarn install
to install dependenciesyarn dev
(the project should automatically run in the browser)If your MR includes any changes outside of documentation, you will need to ensure the following:
CHANGELOG.md
as part of your MR.package.json
file, as it will be handled automatically by shipit
.To merge and publish, comment shipit --publish-version=major/minor/patch
once the MR is approved.
Shipit will handle version bumping based on the specified flag (major, minor, or patch), publish the package to the npm registry, merge the MR into the master branch, and create a corresponding tag.
Note: If an alpha version is to be published, update the package version to include a pre-release identifier like
1.2.3-alpha.1
or1.2.3-v1
and run thepublish:nodejs-npmregistry
job to publish that alpha version.
The QA storybook containing the latest changes is accessible here.
Follow the setup instructions found in
Teams are currently adding components as needed, so the list in storybook right now is what has been built so far.
FAQs
Package containing MX theme and common controls for MUI
We found that @mxenabled/mxui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 30 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.