
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@sablier/evm-utils
Advanced tools
Utilities solidity files used across Sablier's smart contracts
This repository contains the following two sets of contracts:
Its a standalone contract with the following responsibilities:
Its a collection of smart contracts used across various Sablier Solidity projects. The motivation behind this is to reduce code duplication. The following projects imports these contracts:
In-depth documentation is available at docs.sablier.com.
This repo contains the following subdirectories:
src/interfaces
: Interfaces to be used by external projects.src/mocks
: Mock contracts used by external projects in tests.src/tests
: Helper contracts used by external projects in tests and deployment scripts.This is the recommended approach.
Install using your favorite package manager, e.g., with Bun:
bun add @sablier/evm-utils
This installation method is not recommended, but it is available for those who prefer it.
First, install the submodule using Forge:
forge install --no-commit sablier-labs/evm-utils
import { Adminable } from "@sablier/evm-utils/src/Adminable.sol";
import { Batch } from "@sablier/evm-utils/src/Batch.sol";
import { NoDelegateCall } from "@sablier/evm-utils/src/NoDelegateCall.sol";
contract MyContract is Adminable, Batch, NoDelegateCall {
constructor(address initialAdmin) Adminable(initialAdmin) { }
// Use the `noDelegateCall` modifier to prevent delegate calls.
function foo() public noDelegateCall { }
// Use the `onlyAdmin` modifier to restrict access to the admin.
function editFee(uint256 newFee) public onlyAdmin { }
}
See LICENSE.md.
FAQs
Utilities solidity files used across Sablier's smart contracts
The npm package @sablier/evm-utils receives a total of 14 weekly downloads. As such, @sablier/evm-utils popularity was classified as not popular.
We found that @sablier/evm-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.