
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@ora-io/rek
Advanced tools
## Event Cross-Check - used for cross-checking missing events using eth getLogs - note: cross-check interval shouldn't < 5min, otherwise rpc call would be expensive. Recommend set to 1 hour + 50 blocks (for redundancy check).
onMissingLog: FnOnMissingLog: the callback function that will be called when there's a missing log found;ignoreLogs?: SimpleLog[] : it allows users to pass in the txhash list (,log index list) that already processed, let the crosschecker to ignore then.crossCheckRange
crossCheckRetro
crossCheckFrom
Conceptually it supports 'catchup', 'realtime', 'mix' modes, controled by fromBlock and toBlock;
fromBlock and toBlock are NOT present; starts from latestblocknum and never ends, always waits until latestblocknum >= lastcheckpoint + batchBlocksCount;fromBlock and toBlock is present; starts from fromBlock and ends at toBlock;fromBlock is present and toBlock is NOT; auto-transit when lastcheckpoint > latestblocknum - batchBlocksCount;i.e. It starts with 'realtime' mode by default.
Options:
store?: the Store used to cache the <txhash, logindex> that already processed.batchBlocksCount?: how many blocks to get per getLogs check, in readtime mode it waits until the new block num >= batchBlocksCount.intervalMsMin?: mostly for limiting getLogs calling rate in catchup mode; how long does it take at least between 2 checksblockIntervalMs?: the block interval (in ms) of the given chain, default: 12000 for ethdelayBlockFromLatest?: mostly for realtime mode; each time cc wait until latest height > toBlock + delayBlockFromLatestfromBlock?: once specified, it means start catching up from historical blockstoBlock?: once specified, it means the crosscheck isn't infinite and will end at this height; need fromBlock present if this setUsage
const acc = new AutoCrossChecker(provider)
await acc.start({
onMissingLog,
ignoreLogs,
fromBlock: 20003371, // optional, empty to start from latest
toBlock: 20003371, // optional, empty to enter continueous cc
address: CONTRACT_ADDRESS,
topics,
batchBlocksCount: 1,
intervalMsMin: 3000,
})
FAQs
## Event Cross-Check - used for cross-checking missing events using eth getLogs - note: cross-check interval shouldn't < 5min, otherwise rpc call would be expensive. Recommend set to 1 hour + 50 blocks (for redundancy check).
The npm package @ora-io/rek receives a total of 0 weekly downloads. As such, @ora-io/rek popularity was classified as not popular.
We found that @ora-io/rek demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.