
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@perp/lushan
Advanced tools
You should have Node 12 installed. Use nvm to install it.
Clone this repository, install NodeJS dependencies, and build the source code:
git clone git@github.com:perpetual-protocol/perp-lushan.git
npm i
npm run build
Since there are some runtime environment dependencies, if the installation failed on your machine, please try a vanilla install instead:
npm run clean
rm -rf node_modules/
rm package-lock.json
npm install
npm run build
To run all the test cases:
npm run test
export ARBITRUM_RINKEBY_WEB3_ENDPOINT="YOUR_RPC_ENDPOINT"
export ARBITRUM_RINKEBY_DEPLOYER_MNEMONIC="YOUR_MNEMONIC"
# deploy and WILL NOT reuse any existing contracts
npm run clean-deploy:arbitrumRinkeby
# deploy and WILL reuse existing contracts
npm run deploy:arbitrumRinkeby
# only run the specific deployment script
npm run deploy:arbitrumRinkeby -- --tags ClearingHouse
npm run deploy:arbitrumRinkeby -- --tags Pool-vETHvUSD
Update CHANGELOG.md
Update version
of package.json
and package-lock.json
Verify contracts on Tenderly
access_key
from Tenderly settings
config.yaml
file at $HOME/.tenderly/config.yaml
and add an access_key field to it:
access_key: super_secret_access_key
export RINKEBY_WEB3_ENDPOINT=YOUR_RPC_ENDPOINT
npm run verify-tenderly:rinkeby
Verify what's included in the packed npm package
npm pack
# push tag to trigger "Publish NPM package" workflow
git tag vX.X.X
git push origin --tags
# create GitHub release
gh release create vX.X.X -t "vX.X.X" -F CHANGELOG.md
FAQs
## Local development and testing
The npm package @perp/lushan receives a total of 1 weekly downloads. As such, @perp/lushan popularity was classified as not popular.
We found that @perp/lushan demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.