
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@sismo-core/sismo-connect-server
Advanced tools
Sismo Connect is single sign-on method for applications enabling aggregated data requests to users thanks to privacy. Once integrated, applications can request private, granular data from users, while users can authenticate and selectively reveal their data thanks to zero-knowledge proofs (ZKPs).
The Sismo Connect Server is a backend package built on top of the Hydra-S2 Verifier to easily verify proofs from your users off-chain.
Here is the link to the full documentation of the package: Sismo Connect Server package.
You can learn more on Sismo Connect here.
Install Sismo Connect server package in your backend with npm or yarn:
# with npm
npm i @sismo-core/sismo-connect-server
# with yarn
yarn add @sismo-core/sismo-connect-server
Import the package in your backend:
import { SismoConnect, SismoConnectConfig } from "@sismo-core/sismo-connect-server";
const config: SismoConnectConfig = {
// you will need to register an appId in the Sismo Factory
appId: "0x8f347ca31790557391cec39b06f02dc2",
};
// create a new Sismo Connect instance with the server configuration
const sismoConnect = SismoConnect({ config });
See the full documentation here.
Distributed under the MIT License.
Please, feel free to open issues, PRs or simply provide feedback!
Send us a message in Telegram or Discord
FAQs
sismoConnect server package
The npm package @sismo-core/sismo-connect-server receives a total of 5 weekly downloads. As such, @sismo-core/sismo-connect-server popularity was classified as not popular.
We found that @sismo-core/sismo-connect-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.