
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@wavesenterprise/dao-contract-api
Advanced tools
Обертка над voting-blockchain-tools для взаимодействия с dao контрактом.
Обертка над voting-blockchain-tools для взаимодействия с dao контрактом.
{
ransactionBroadcaster: TransactionBroadcaster,# transaction broadcastes from voting-blockchain-tools
keyPair: IKeyPair, # public and private key to sign transaction
nodeAddress: string, # address to node
axiosInstance?: AxiosInstance, # authorized axios with "Authorization" header
isWaitTransactionMining?: boolean, # wheter to resolve right after sending or wait mining. Default: true
statusResponseTimeout?: number, # wait mining max time. Default: 100000
maxMiningAttempts?: number | null, # max mining errors from nodes to stop mining. Default: 3
feeAssetId?: string | null, # asset id to pay commission fee. Default: null
}
Примеры использования библиотеки можно найти в папке examples
.env
файл в корне проекта с содержимым:# node address
NODE_ADDRESS=https://voting-volgograd.welocal.dev/nodeAddress
# auth service address
AUTH_SERVICE_ADDRESS=https://voting-volgograd.welocal.dev/authServiceAddress
AUTH_SERVICE_SECRET_KEY=secret
# Ключ отправителя транзакции
PRIVATE_KEY=7GGyPVkdZe1P6XmiCwwEVqtsjMCYqTxvawQL4eeaH7JY
PUBLIC_KEY=9d5PyQqUnqTTETDBzejT4AAaSC5A6dMa1n7ShRxtne8TsfGxefD4WfZajX5LBA76eNAQbDQsa1RX8Z6M53nphFj
# Как в настройках decrypt-service. Можно также не указывать или оставить "WAVES" для дефолта.
TRANSACTION_FEE_ASSET_ID = WAVES
# txid контракта
CONTRACT_ID=Hc8tcraetYFqTYJJ4iVk1a8SWK1SNbVM8VUNheNB9HF9
CONTRACT_IMAGE=registry.vostokservices.com/voting/voting-contract:cumulative-voting-0.2
CONTRACT_IMAGE_HASH=1f24e814e598114c5f0000373a43bc358beb7ea42b4d05064b1f1694248ddca2
.env
. Не забыть поменять AUTH_SERVICE_SECRET_KEY
npm i
npx ts-node examples/updateContractImage.ts
https://voting-volgograd.welocal.dev/node-0/api-docs/index.html#/contracts/getContractInfo
FAQs
Обертка над voting-blockchain-tools для взаимодействия с dao контрактом.
We found that @wavesenterprise/dao-contract-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.