Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@pontem/wallet-adapter-plugin
Advanced tools
This repo provides wallet builders a pre-made class with all required wallet functionality following the wallet standard for easy and fast development to interact with the Aptos Wallet Adapter
git clone git@github.com:aptos-labs/wallet-adapter-plugin-template.git
run npm install
or yarn install
Open src/index.ts
Change all AptosWindow
appereances to <Your-Wallet-Name>Window
Change AptosWalletName
to be <Your-Wallet-Name>WalletName
Change url
to match your website url
Change icon
to your wallet icon (pay attention to the required format)
Change window.aptos
to be window.<your-wallet-name>
Window Interface
has <your-wallet-name>
as a key (instead of aptos
)Open __tests/index.test.tsx
and change AptosWallet
to <Your-Wallet-Name>Wallet
Run tests with npm run test
- all tests should pass
At this point, you have a ready wallet class with all required properties and functions to integrate with the Aptos Wallet Adapter.
Next step is to publish your wallet as a npm package so dapps can install it as a dependency.
Creating and publishing scoped public packages https://docs.npmjs.com/creating-and-publishing-scoped-public-packages
Creating and publishing unscoped public packages https://docs.npmjs.com/creating-and-publishing-unscoped-public-packages
Once the package is published, you can create a PR against the aptos-wallet-adapter repo and add your wallet name as a url to the npm package to the supported wallet list on the README file.
Note: if your wallet provides function that is not included, you should open a PR against aptos-wallet-adapter in the core package so it would support this functionality. You can take a look at the
signTransaction
on the wallet core package
FAQs
Pontem plugin to use with Aptos Wallet Adapter
The npm package @pontem/wallet-adapter-plugin receives a total of 1,199 weekly downloads. As such, @pontem/wallet-adapter-plugin popularity was classified as popular.
We found that @pontem/wallet-adapter-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.