
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@pinelab/vendure-plugin-coinbase
Advanced tools
Accept crypto payments via Coinbase Commerce in Vendure.
Add the plugin to your vendure-config.ts
:
import { CoinbasePlugin } from "@pinelab/vendure-plugin-coinbase"
plugins: [
CoinbasePlugin,
...
];
coinbase-payment-handler
https://storefront/order/
. Your customer will be redirected
to this page + order code: https://storefront/order/897HH7HG7
https://<your-vendure-server>/payments/coinbase
You can now call the mutation createCoinbasePaymentIntent
to get a redirectUrl to the Coinbase hosted checkout page.
You can redirect your customer to this URL, so your customer can continue making a payment on the Coinbase platform.
After payment the customer will be redirected to https://storefront/order/897HH7HG7
Orders are NOT transitioned to PaymentSettled
directly after Coinbase redirects the customer to the confirmation page, because
crypto transactions can take some time to confirm. You should notify your customer with a message that the order will be
handled when their transaction is confirmed. This can take a few minutes.
Refunds are not supported. If you want to refund a payment done via Coinbase you need to manually do so. This plugin will not do refunds via Coinbase.
FAQs
Vendure plugin for Coinbase payments
We found that @pinelab/vendure-plugin-coinbase demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.