
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@onlabsorg/ipfs-store
Advanced tools
This is an olojs document store based on IPFS.
Install via npm:
npm install @onlabsorg/ipfs-store
Create an IPFS store:
const IPFS = require('ipfs-core');
const ipfs = await IPFS.create();
const {IPFSStore} = require('..');
const store = new IPFSStore(ipfs, CID); // CID is a valid IPFS directory content id
Read the IPFS store content:
const source = await store.read('/path/to/doc'); // returns ipfs://<CID>/path/to/doc
const items = await store.list('/path/to/dir'); // returns the array of child names of ipfs://<CID>/path/to/dir/
Of course write
, delete
and deleteAll
operations are not allowed, being
the files stored on IPFS read-only. In order to modify an IPFS store, you can
clone it to an olojs MemoryStore, modify it and add it again to IPFS.
const clone = await store.clone('/'); // you can clone just a subdir if you want
const newCID = await IPFSStore.create(ipfs, clone);
Notice that cloning+adding does not modify the original directory, but it creates a new one instead.
When installed as stilo plugin, this library adds the /ipfs
route to
your stilo hub.
In order to install olojs-cli
as stilo plugin, type the following command
from your stilo package root:
stilo install @onlabsorg/ipfs-store
Once you installed it, you can fetch, render or list the olojs documents stored on IPFS. Example:
stilo read /ipfs/QmQnEkNLoSHWDukHoW7J8gFbikx6eGWx2FGv5t1nxo8Wy7/helloworld
stilo list /ipfs/QmQnEkNLoSHWDukHoW7J8gFbikx6eGWx2FGv5t1nxo8Wy7
stilo render /ipfs/QmQnEkNLoSHWDukHoW7J8gFbikx6eGWx2FGv5t1nxo8Wy7/helloworld
Of course the ipfs:
protocol will be available also in your olojs documents:
<% hw = import '/ipfs/QmQnEkNLoSHWDukHoW7J8gFbikx6eGWx2FGv5t1nxo8Wy7/helloworld'
This software is released under the ISC license.
FAQs
olojs store backed by IPFS
The npm package @onlabsorg/ipfs-store receives a total of 0 weekly downloads. As such, @onlabsorg/ipfs-store popularity was classified as not popular.
We found that @onlabsorg/ipfs-store demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.