
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@tru_id/tru-sdk-react-native
Advanced tools
The only purpose of the SDK is to force the data cellular connectivity prior to call a public URL, and will return the following JSON response
{
"http_status": string, // HTTP status related to the url
"response_body" : { // optional depending on the HTTP status
... // the response body of the opened url
... // see API doc for /device_ip and /redirect
},
"debug" : {
"device_info": string,
"url_trace" : string
}
}
{
"error" : string,
"error_description": string,
"debug": {
"device_info": string,
"url_trace" : string
}
}
Potential error codes: sdk_no_data_connectivity
, sdk_connection_error
, sdk_redirect_error
, sdk_error
.
npm install @tru_id/tru-sdk-react-native
For Android, add the following to your application's build.gradle
:
maven {
url "https://gitlab.com/api/v4/projects/22035475/packages/maven"
}
import TruSdkReactNative, {
ReachabilityResponse,
CheckResponse,
CheckErrorBody,
CheckSuccessBody,
ApiError,
ReachabilityBody,
ReachabilityResponseBody,
} from '@tru_id/tru-sdk-react-native';
// ...
// retrieve access token with coverage scope from back-end
const token = ...
// open the device_ip public API endpoint
if (token) {
const res =
await TruSdkReactNative.openWithDataCellularAndAccessToken<ReachabilityResponse>(
'https://eu.api.tru.id/coverage/v0.1/device_ip',
true,
token
);
if ('error' in res) {
// error ${err.error_description}
} else if ('http_status' in res) {
const httpStatus = success.http_status;
if (httpStatus === 200 && res.response_body !== undefined) {
const body = res.response_body as ReachabilityBody
// device is eligible on MNO ${body.network_name}
} else if (httpStatus === 400 && res.response_body !== undefined) {
const body = res.response_body as ApiError;
// MNO not supported ${body.detail}
} else if (httpStatus === 412 && res.response_body !== undefined) {
const body = res.response_body as ApiError;
// Not a mobile IP ${body.detail}
} else if (res.response_body !== undefined) {
const body = res.response_body as ApiError;
// other error see ${body.detail}
}
}
}
import TruSdkReactNative, {
ReachabilityResponse,
CheckResponse,
CheckErrorBody,
CheckSuccessBody,
ApiError,
ReachabilityBody,
ReachabilityResponseBody,
} from '@tru_id/tru-sdk-react-native';
// ...
const res = await TruSdkReactNative.openWithDataCellular<CheckResponse>(checkUrl);
if ('error' in res) {
// error see ${err.error_description}
} else if ('http_status' in res) {
const httpStatus = res.http_status;
if (httpStatus === 200 && res.response_body !== undefined) {
if ('error' in res.response_body) {
const body = res.response_body as CheckErrorBody;
// error see ${body.error_description}
} else {
const body = res.response_body as CheckSuccessBody;
// send ${body.code}, ${body.check_id} and ${body.reference_id} to back-end
// to trigger a PATCH /checks/{check_id}
}
} else if (httpStatus == 400 && res.response_body !== undefined) {
const body = res.response_body as ApiError;
// MNO not supported see ${body.detail}
} else if (httpStatus === 412 && res.response_body !== undefined) {
const body = res.response_body as ApiError;
// Not a mobile IP see ${body.detail}
} else if (res.response_body !== undefined) {
const body = res.response_body as ApiError;
// other error see ${body.detail}
}
}
There's an embedded example demo is located in the example
directory, see README
See the contributing guide to learn how to contribute to the repository and the development workflow.
Update CHANGELOG.md
and finesse.
$ yarn run changelog
Commit the changes:
$ git commit -m 'chore(release): v{version}'
Tag:
$ git tag v{version}
Publish a new canary build to test.
$ yarn run publish:canary
Publish a full version:
$ yarn run publish:latest
Distributed under the MIT license. See LICENSE
for more information.
FAQs
React Native SDK for tru.ID
We found that @tru_id/tru-sdk-react-native demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.