
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@solana-mobile/mobile-wallet-adapter-expo-bottom-sheet
Advanced tools
Config plugin to add a Mobile Wallet Adapter bottom sheet Activity to an Expo app
An Expo Config Plugin for by Expo Solana wallets to inject a bottom sheet themed Android Activity to handle Mobile Wallet Adapter requests. Wallets can designate a React component to render as UI for the injected activity.
npm install <TODO: Publish npm package>
Configure the plugin in your app.json.
Optionally, specify a walletUriBase
to register your wallet's custom mwa scheme to handle intents.
{
"expo": {
"name": "myApp",
"plugins": [
[
"mwa-bottom-sheet-expo-plugin",
{
"walletUriBase": "my-custom-mwa-scheme"
}
]
]
}
}
The config plugin injects an Android activity into your expo build, but you'll need to register the injected Activity on the Javascript side.
Copy over node_modules/expo/AppEntry.js
to a new file (CustomAppEntry.js
) and just add the AppRegistry.registerComponent
call.
// CustomAppEntry.js
import registerRootComponent from "expo/build/launch/registerRootComponent";
import { AppRegistry } from "react-native";
import App from "./App";
import YourMWABottomSheetComponent from "./YourMWABottomSheetComponent";
// Add this to associate the activity -> React Component
AppRegistry.registerComponent(
"MobileWalletAdapterEntrypoint",
() => YourMWABottomSheetComponent
);
registerRootComponent(App);
In package.json
, redirect "main"
to point at the custom entrypoint file.
{
"name": "your-expo-app",
"main": "./CustomAppEntry.js",
}
Now the config plugin is configured and will be included in the expo prebuild step of eas build
!
FAQs
Config plugin to add a Mobile Wallet Adapter bottom sheet Activity to an Expo app
We found that @solana-mobile/mobile-wallet-adapter-expo-bottom-sheet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.