Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@wildcatfi/wildcat-sdk
Advanced tools
import { getController, MarketController, MarketParameters } from "@wildcatfi/wildcat-sdk";
const controller: MarketController = await getController(signer, borrower);
controller.constraints: MarketParameterConstraints
contains the min/max values of
annualInterestBips
delinquencyFeeBips
withdrawalBatchDuration
reserveRatioBips
delinquencyGracePeriod
If provided values are out of this range, market deployment will revert.
import { deployToken } from "@wildcatfi/wildcat-sdk";
await deployToken(signer, "name", "symbol");
const marketParameters: MarketParameters = {...}
// 1. Ensure borrower is registered on the arch-controller.
// For the testnet deployment, anyone can register a borrower
if (!controller.isRegisteredBorrower) {
await controller.registerBorrower()
}
// 2. Ensure the `asset, namePrefix, symbolPrefix` are unique.
if (controller.getExistingMarketForParameters(marketParameters)) {
throw Error()
}
// 3. Deploy market
const market: Market = await controller.deployMarket(marketParameters);
Market
instances on Wildcatimport { getAllMarkets } from "@wildcatfi/wildcat-sdk";
const markets = getAllMarkets(provider);
Market
instances for borrowerconst controller: MarketController = await getController(signer, borrower);
// controller.markets has an array of all Market instances for the controller
MarketAccount
MarketAccount
for every marketimport { getAllMarketAccountsForLender } from "@wildcatfi/wildcat-sdk";
const accounts = await getAllMarketAccountsForLender(signer, lenderAddress);
if (market.underlyingToken.isMock) {
await market.underlyingToken.faucet();
}
Whenever anything in ./gql
or ./contracts
is changed, run yarn codegen
to regenerate the graphql and typechain types.
The graphql scripts take a while to run, so the graphql script saves a file in .gql-cache with the checksums of the previous input/output files from gql codegen, so the script can skip graphql codegen if there's no reason to. Typechain only takes about a second so we don't do the same for it.
This runs:
yarn codegen:gql
- Generates TS types for all the graphql queries, then runs a script to simplify the type literals (gql-type-cleanup.js)yarn codegen:typechain
- Generates types for the contracts with typechain, then runs a script (add-typechain-exports.js) to add exports for all the structs in the contracts to the src/typechain index fileFAQs
## Deploying markets
We found that @wildcatfi/wildcat-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.