
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@talismn/api
Advanced tools
A lib for spinning up multiple polkadot.js or lightclient instances and being able to perform aggregate queries
A package for doing fast analysis across multiple DotSama chains at once.
At a high level, @talismn/api
is a factory library which you can use to perform queries across many DotSama parachains. These queries are executed in parallel and their results are combined into a useful output.
This library can be made to fetch data via one of three connector types:
TalismanConnect
- our super lightweight RPC client designed to query potentially hundreds of parachains as fast and efficiently as possible ⚡PolkadotJs
- the full featured RPC client from @paritytechLightclient
- spin up a (light) node and talk straight to the parachain networksBy default this library uses the community-defined chain RPCs and lightclient chainspecs at TalismanSociety/chaindata, but can also be used with custom RPCs/chainspecs if needed.
The goals of this library are to:
In the future, we would like to:
balances
endpoint (e.g. crowdloans, crowdloan contributions, bonded funds, etc)balances
/subscribeBalances
from outgoing RPC requests (add a cache which is shared between api calls, use RPC to fill cache rather than to directly respond to api request)Please note: while we work towards a v1.0 release, the public interface is subject to change.
import Talisman from '@talismn/api'
note:
Talisman
is a singleton
// Connect to the chain RPCs
await Talisman.connect({ chains: [0, 2, 2000] })
// Fetch balances
await Talisman.balances(['0x000...', '0x000...'])
// Will output an array of balances:
//
// [{
// chainId: '0',
// address: '0x000...',
// token: 'DOT',
//
// total: '10000000000000',
// free: '10000000000000',
// reserved: '0',
// miscFrozen: '0',
// feeFrozen: '0',
// }]
note:
Talisman.connect
is only required if not using subscriptions
// Initialize the singleton
Talisman.init()
// Subscribe to balances
const unsubscribe = Talisman.subscribeBalances(
[0, 2, 2000], // chains
['0x000...', '0x000...'], // addresses
(balance) => console.log(balance)
)
// Will output all account balanaces once, then future balance changes as they happen:
//
// {
// chainId: '0',
// address: '0x000...',
// token: 'DOT',
//
// total: '10000000000000',
// free: '10000000000000',
// reserved: '0',
// miscFrozen: '0',
// feeFrozen: '0',
// }
// (later) Unsubscribe from future balances
unsubscribe()
FAQs
A lib for spinning up multiple polkadot.js or lightclient instances and being able to perform aggregate queries
The npm package @talismn/api receives a total of 8 weekly downloads. As such, @talismn/api popularity was classified as not popular.
We found that @talismn/api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.