Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@wavesenterprise/dao-contract-api
Advanced tools
Обертка над voting-blockchain-tools для взаимодействия с dao контрактом.
Обертка над voting-blockchain-tools для взаимодействия с dao контрактом.
{
ransactionBroadcaster: TransactionBroadcaster,# transaction broadcastes from voting-blockchain-tools
keyPair: IKeyPair, # public and private key to sign transaction
nodeAddress: string, # address to node
axiosInstance?: AxiosInstance, # authorized axios with "Authorization" header
isWaitTransactionMining?: boolean, # wheter to resolve right after sending or wait mining. Default: true
statusResponseTimeout?: number, # wait mining max time. Default: 100000
maxMiningAttempts?: number | null, # max mining errors from nodes to stop mining. Default: 3
feeAssetId?: string | null, # asset id to pay commission fee. Default: null
}
Примеры использования библиотеки можно найти в папке examples
.env
файл в корне проекта с содержимым:# node address
NODE_ADDRESS=https://voting-volgograd.welocal.dev/nodeAddress
# auth service address
AUTH_SERVICE_ADDRESS=https://voting-volgograd.welocal.dev/authServiceAddress
AUTH_SERVICE_SECRET_KEY=secret
# Ключ отправителя транзакции
PRIVATE_KEY=7GGyPVkdZe1P6XmiCwwEVqtsjMCYqTxvawQL4eeaH7JY
PUBLIC_KEY=9d5PyQqUnqTTETDBzejT4AAaSC5A6dMa1n7ShRxtne8TsfGxefD4WfZajX5LBA76eNAQbDQsa1RX8Z6M53nphFj
# Как в настройках decrypt-service. Можно также не указывать или оставить "WAVES" для дефолта.
TRANSACTION_FEE_ASSET_ID = WAVES
# txid контракта
CONTRACT_ID=Hc8tcraetYFqTYJJ4iVk1a8SWK1SNbVM8VUNheNB9HF9
CONTRACT_IMAGE=registry.vostokservices.com/voting/voting-contract:cumulative-voting-0.2
CONTRACT_IMAGE_HASH=1f24e814e598114c5f0000373a43bc358beb7ea42b4d05064b1f1694248ddca2
.env
. Не забыть поменять AUTH_SERVICE_SECRET_KEY
npm i
npx ts-node examples/updateContractImage.ts
https://voting-volgograd.welocal.dev/node-0/api-docs/index.html#/contracts/getContractInfo
FAQs
Обертка над voting-blockchain-tools для взаимодействия с dao контрактом.
The npm package @wavesenterprise/dao-contract-api receives a total of 0 weekly downloads. As such, @wavesenterprise/dao-contract-api popularity was classified as not popular.
We found that @wavesenterprise/dao-contract-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.