Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@nfteyez/sol-rayz
Advanced tools
These packages created to simplify the process of parsing NFTs on Solana.
These packages created to simplify the process of parsing NFTs on Solana.
Can be used for basic things like fetch all NFTs for specific wallet. Designed to be used in browser or Node.JS env.
You need install @solana/web3.js
in your project, since it is used as peer dependency.
npm i @solana/web3.js
npm i @nfteyez/sol-rayz
getParsedNftAccountsByOwner
- return parsed list of NFTs (SPL Tokens) for given wallet public address. Each item in array have all data specified on the blockchain. The NFT metadata stored separately, you need to pick uri
property for each token and fetch data youself.
import {
getParsedNftAccountsByOwner
} from "@nfteyez/sol-rayz";
const tokenList = await getParsedNftAccountsByOwner({
/**
* Wallet public address
*/
publicAddress: StringPublicKey;
/**
* Optionally provide your own connection object.
* Otherwise createConnectionConfig() will be used
*/
connection?: Connection;
/**
* Remove possible rust's empty string symbols `\x00` from the values,
* which is very common issue.
* Default is true
*/
sanitize?: boolean;
/**
* TODO: Add description within README and link here
* Default is false - slow method
* true - is fast method
*/
strictNftStandard?: boolean;
/**
* Convert all PublicKey objects to string versions.
* Default is true
*/
stringifyPubKeys?: boolean;
/**
* Sort tokens by Update Authority (read by Collection)
* Default is true
*/
sort?: boolean;
});
createConnectionConfig
- method for creating a "connection" with Solana, have two params: clusterApi and commitment.
isValidSolanaAddress
- check if provided string is valid Solana address.
import { isValidSolanaAddress } from "@nfteyez/sol-rayz";
const isValidAddress: boolean = isValidSolanaAddress((walletPublicKey: string));
getParsedAccountByMint
- return parsed account for given mint address.
import { getParsedAccountByMint } from '@nfteyez/sol-rayz';
const parsedAccountByMint: ParsedAccountInfo = getParsedAccountByMintgetParsedAccountByMint({
/**
* Mint address
*/
mintAddress: StringPublicKey;
/**
* Optionally provide your own connection object.
* Otherwise createConnectionConfig() will be used
*/
connection?: Connection;
});
getParsedNftAccountsByUpdateAuthority
- return parsed list of NFTs (SPL Tokens) for given update authority. Each item in array have all data specified on the blockchain. The NFT metadata stored separately, you need to pick uri
property for each token and fetch data youself.
import { getParsedNftAccountsByUpdateAuthority } from '@nfteyez/sol-rayz';
const parsedAccountByMint = getParsedNftAccountsByUpdateAuthority({
/**
* Update authority address
*/
updateAuthority: StringPublicKey;
/**
* Optionally provide your own connection object.
* Otherwise createConnectionConfig() will be used
*/
connection?: Connection;
});
FAQs
These packages created to simplify the process of parsing NFTs on Solana.
The npm package @nfteyez/sol-rayz receives a total of 382 weekly downloads. As such, @nfteyez/sol-rayz popularity was classified as not popular.
We found that @nfteyez/sol-rayz demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.