Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@truffle/dashboard-message-bus-common
Advanced tools
Message types that are used when communicating with the Truffle dashboard message bus
:warning: This is a middleware package and should only be used when developing integrations for the truffle dashboard :warning:
This package serves as a set of common types to be shared between packages like @truffle/dashboard-message-bus
and @truffle/dashboard-message-bus-client
If you are building a package that needs to interface with the Dashboard or message bus, you can install this package from NPM.
npm install @truffle/dashboard-message-bus-common
yarn add @truffle/dashboard-message-bus-common
Right now there are very few message types. The most important one is "provider"
, which sends RPC requests for the dashboard-provider. Other message types are "invalidate"
, which can be sent to invalidate earlier messages, and "log"
, which is sent by the message bus to send log messages over the wire. The interfaces of these messages are defined inside of this package, from where they can be imported by consumers.
To add additional message types, the interface for the new message type should be defined in this package under lib/messages.ts
. To use these new messge formats, support needs to be added to any consuming packages such as @truffle/dashboard
as well.
FAQs
Message types that are used when communicating with the Truffle dashboard message bus
The npm package @truffle/dashboard-message-bus-common receives a total of 6,907 weekly downloads. As such, @truffle/dashboard-message-bus-common popularity was classified as popular.
We found that @truffle/dashboard-message-bus-common demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.