
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@ucp-npm/mx-adapter
Advanced tools
This is the adapter that makes it possible to connect with MX via the Universal Connect Widget.
This package is meant to be used with the Universal Connect Widget. If you have forked the UCW project, you can install it as a dependency of the widget.
Navigate to your forked project and, from the root of the project, run:
npm i @ucp-npm/mx-adapter --workspace apps/server
Once you have the npm package installed, you can set up the ucw to use it.
In the ./apps/server/adapterSetup.ts
file, do the following:
Import getMxAdapterMapObject
from the MX adapter package:
import { getMxAdapterMapObject } from "@ucp-npm/mx-adapter";
Import the logger and cache client (redis) dependencies:
import * as logger from "./infra/logger";
import { get, set } from "./services/storageClient/redis";
Next, look for the line that starts with export const adapterMap = {
, and add the adapter map as follows:
const mxAdapterMapObject = getMxAdapterMapObject({
cacheClient: {
set: set,
get: get,
},
logClient: logger,
aggregatorCredentials: {
mxInt: {
username: config.MX_CLIENT_ID,
password: config.MX_API_SECRET,
},
mxProd: {
username: config.MX_CLIENT_ID_PROD,
password: config.MX_API_SECRET_PROD,
},
},
envConfig: {
HOSTURL: config.HOST_URL,
},
});
export const adapterMap = {
...mxAdapterMapObject,
...testAdapterMapObject,
};
The logClient
and cacheClient
dependencies are provided by the Universal Connect Widget.
https://www.npmjs.com/package/@ucp-npm/mx-adapter
See https://universalconnectproject.org/ for more information.
FAQs
MX Adapter for the Universal Connect Widget
We found that @ucp-npm/mx-adapter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.