
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
@ubeswap/subgraph
Advanced tools
[Ubeswap](https://ubeswap.org/) is a decentralized protocol for automated token exchange on Ethereum.
Ubeswap is a decentralized protocol for automated token exchange on Ethereum.
This subgraph dynamically tracks any pair created by the ubeswap factory. It tracks of the current state of Ubeswap contracts, and contains derived stats for things like historical data and USD prices.
Make sure to update package.json settings to point to your own graph account.
Below are a few ways to show how to query the ubeswap-subgraph for data. The queries show most of the information that is queryable, but there are many other filtering options that can be used, just check out the querying api. These queries can be used locally or in The Graph Explorer playground.
Contains data across all of Ubeswap. This entity tracks important things like total liquidity (in CELO and USD, see below), all time volume, transaction count, number of pairs and more.
Contains data on a specific token. This token specific data is aggregated across all pairs, and is updated whenever there is a transaction involving that token.
Contains data on a specific pair.
Every transaction on Ubeswap is stored. Each transaction contains an array of mints, burns, and swaps that occured within it.
These contain specifc information about a transaction. Things like which pair triggered the transaction, amounts, sender, recipient, and more. Each is linked to a parent Transaction entity.
This query fetches aggredated data from all ubeswap pairs and tokens, to give a view into how much activity is happening within the whole protocol.
{
ubeswapFactories(first: 1) {
pairCount
totalVolumeUSD
totalLiquidityUSD
}
}
In addition to any that might be in the code base:
package.json
scripts need updated commandsFAQs
[Ubeswap](https://ubeswap.org/) is a decentralized protocol for automated token exchange on Ethereum.
The npm package @ubeswap/subgraph receives a total of 0 weekly downloads. As such, @ubeswap/subgraph popularity was classified as not popular.
We found that @ubeswap/subgraph demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.