
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@rsksmart/rif-relay-client
Advanced tools
This project contains all the client code for the rif relay system.
This typescript repository contains all the client code used by the RIF Relay System.
This project works as a dependency and needs to be installed in order to be used.
Just run npm install
to install all dependencies.
You can use this dependency once you have it installed on your project. There are multiple ways to do this:
Install with:
npm i --save @rsksmart/rif-relay-client
Clone this repository inside your project's root folder and use the npm link
mechanism (https://docs.npmjs.com/cli/v8/commands/npm-link) to add it to your project.
Make your modifications and then run npm run build
to validate them.
When you are done with your changes, you can publish them by creating a distributable version.
We use husky to check linters and code styles on commits, if you commit your changes and the commit fails on lint or prettier checks you can use these command to check and fix the errors before trying to commit again:
npm run lint
: to check linter bugsnpm run lint:fix
: to fix linter bugsnpm run format
: to check codestyles errorsnpm run format:fix
: to fix codestyles errorsnpm run dist
command to generate the dist
folder with the distributable version inside.package.json
file (not strictly needed).package.json
) and github actions will update npmnpm login
to login to your account on npm registry.npm publish
to generate the distributable version for NodeJS.No extra steps are needed beyond generating the dist
folder and merging it to master
.
FAQs
This project contains all the client code for the rif relay system.
We found that @rsksmart/rif-relay-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.