
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@spotto/contract
Advanced tools
This repository is a source of truth / documentation for the spotto-api.
The repository consists of a series of typescript classes that document the API contract between the spotto API and its clients
When adding endpoints create a new folder / file for your endpoint. Fill out file using others as a guide.
Any response and request shapes should be specified in the /types folder. The documentation server is sometimes unable to understand more complicated interfaces. In these scenarios please create two types files, one with a logical working type that can be used by other repositories. The other will be simply for filling the response server.
Any documentation specific types files should have the suffix 'Docs' within the same folder. e.g.
FAQs
Spotto's API Contract type definitions
The npm package @spotto/contract receives a total of 767 weekly downloads. As such, @spotto/contract popularity was classified as not popular.
We found that @spotto/contract demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.