
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@ubeswap/subgraph
Advanced tools
[Ubeswap](https://ubeswap.org/) is a decentralized protocol for automated token exchange on Ethereum.
Ubeswap is a decentralized protocol for automated token exchange on Ethereum.
This subgraph dynamically tracks any pair created by the ubeswap factory. It tracks of the current state of Ubeswap contracts, and contains derived stats for things like historical data and USD prices.
Make sure to update package.json settings to point to your own graph account.
Below are a few ways to show how to query the ubeswap-subgraph for data. The queries show most of the information that is queryable, but there are many other filtering options that can be used, just check out the querying api. These queries can be used locally or in The Graph Explorer playground.
Contains data across all of Ubeswap. This entity tracks important things like total liquidity (in CELO and USD, see below), all time volume, transaction count, number of pairs and more.
Contains data on a specific token. This token specific data is aggregated across all pairs, and is updated whenever there is a transaction involving that token.
Contains data on a specific pair.
Every transaction on Ubeswap is stored. Each transaction contains an array of mints, burns, and swaps that occured within it.
These contain specifc information about a transaction. Things like which pair triggered the transaction, amounts, sender, recipient, and more. Each is linked to a parent Transaction entity.
This query fetches aggredated data from all ubeswap pairs and tokens, to give a view into how much activity is happening within the whole protocol.
{
ubeswapFactories(first: 1) {
pairCount
totalVolumeUSD
totalLiquidityUSD
}
}
In addition to any that might be in the code base:
package.json
scripts need updated commandsFAQs
[Ubeswap](https://ubeswap.org/) is a decentralized protocol for automated token exchange on Ethereum.
The npm package @ubeswap/subgraph receives a total of 0 weekly downloads. As such, @ubeswap/subgraph popularity was classified as not popular.
We found that @ubeswap/subgraph demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.