
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@xchainjs/xchain-base
Advanced tools
Client that allows to perform operations on the Base blockchain abstracting developers from its particularities, thus allowing developers to focus on their projects. Base is a secure, low-cost, builder-friendly Ethereum L2.
If you want to read more about Base blockchain, go to its official web site
yarn add @xchainjs/xchain-base
or
npm install @xchainjs/xchain-base
Using the Base client you can initialize the main class of the module in consultation mode if you do not provide any parameters, this means you could retrieve information from the blockchain and prepare transactions to sign, but you will not be able to sign transactions, or generate addresses.
import { Client } from '@xchainjs/xchain-base'
const client = new Client()
// Make read operations with your client
Otherwise, if you want to sign transactions and get the addresses you own, you will need to initialize the main class of the protocol as follows
import { Client, defaultBaseParams } from '@xchainjs/xchain-base'
const client = new Client({
phrase: 'your secret phrase',
...defaultBaseParams
})
// Make read or write operations with your client
Thanks to the Base client you will be able to:
You can find examples using the Base package in the base examples folder.
More information about how to use the Base client can be found on documentation
FAQs
Base EVM client for XChainJS
We found that @xchainjs/xchain-base demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.