Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@nomiclabs/buidler
Advanced tools
Buidler is an extensible developer tool that helps smart contract developers increase productivity by reliably bringing together the tools they want.
Buidler is a task runner for Ethereum smart contract developers. It facilitates performing frequent tasks, such as running tests, automatically checking code for mistakes or interacting with a smart contract. Check out the plugin list to use it with your existing tools.
Developed by Nomic Labs and funded by an Ethereum Foundation grant.
Join our Buidler Support Discord server to stay up to date on new releases, plugins and tutorials.
🚧 For the most recently published code, look at the master
branch 🚧
The recommended way of using Buidler is through a local installation in your project. This way your environment will be reproducible and you will avoid future version conflicts. To use it in this way you will need to prepend npx
to run it (i.e. npx buidler
). To install locally initialize your npm
project using npm init
and follow the instructions. Once ready run:
npm install --save-dev @nomiclabs/buidler
On Buidler's website you will find:
Contributions are always welcome! Feel free to open any issue or send a pull request.
Go to CONTRIBUTING.md to learn about how to set up Buidler's development environment.
Buidler Support Discord server: for questions and feedback.
👷♀️👷♂️👷♀️👷♂️👷♀️👷♂️👷♀️👷♂️👷♀️👷♂️👷♀️👷♂️👷♀️👷♂️
FAQs
Buidler is an extensible developer tool that helps smart contract developers increase productivity by reliably bringing together the tools they want.
The npm package @nomiclabs/buidler receives a total of 2,342 weekly downloads. As such, @nomiclabs/buidler popularity was classified as popular.
We found that @nomiclabs/buidler demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.