
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
@ubeswap/default-token-list
Advanced tools
Official token list of Ubeswap.
To add a token to Ubeswap:
cd default-token-list
.yarn install
. Note: you must be on Node.js 14.x or later to do this.assets/
(it must be a PNG less than 200px by 200px or an svg). If your token symbol is TEST, your asset must be named TEST.png.src/<network>.token-list.json
, where <network>
is the name of the network your token is deployed to.yarn build
to regenerate the main token list.Recommend the squoosh-cli.
yarn squoosh-cli --output-dir tmp/resized --resize '{width: 200}' --oxipng auto assets/asset_cETH.png
In certain cases such as if the proportions are not square or if automatic resize results in a larger file size than the orginal you will need to resize with another tool or re export from your graphics app.
MIT
FAQs
Ubeswap default token list
The npm package @ubeswap/default-token-list receives a total of 294 weekly downloads. As such, @ubeswap/default-token-list popularity was classified as not popular.
We found that @ubeswap/default-token-list demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.