
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@sismo-core/sismo-connect-server
Advanced tools
Sismo Connect is single sign-on method for applications enabling aggregated data requests to users thanks to privacy. Once integrated, applications can request private, granular data from users, while users can authenticate and selectively reveal their data thanks to zero-knowledge proofs (ZKPs).
The Sismo Connect Server is a backend package built on top of the Hydra-S2 Verifier to easily verify proofs from your users off-chain.
Here is the link to the full documentation of the package: Sismo Connect Server package.
You can learn more on Sismo Connect here.
Install Sismo Connect server package in your backend with npm or yarn:
# with npm
npm i @sismo-core/sismo-connect-server
# with yarn
yarn add @sismo-core/sismo-connect-server
Import the package in your backend:
import { SismoConnect, SismoConnectConfig } from "@sismo-core/sismo-connect-server";
const config: SismoConnectConfig = {
// you will need to register an appId in the Sismo Factory
appId: "0x8f347ca31790557391cec39b06f02dc2",
};
// create a new Sismo Connect instance with the server configuration
const sismoConnect = SismoConnect({ config });
See the full documentation here.
Distributed under the MIT License.
Please, feel free to open issues, PRs or simply provide feedback!
Send us a message in Telegram or Discord
FAQs
sismoConnect server package
We found that @sismo-core/sismo-connect-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.