
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@yoroi/identicon
Advanced tools
The Identicon module for Yoroi to provide a visual representation of a wallet (pub-key) using identicons. Initially, this module leverages Blockies and Jazzicon algorithms to generate these visual identifiers.
To install the Identicon module, use npm/yarn:
# npm
npm install @yoroi/identicon
# yarn
yarn add @yoroi/identicon
# workspace
yarn workspace <pkg> add @yoroi/identicon
const publicKey = 'BEDEAD'
const blockie = new Blockies({seed: publicKey})
const base64Image = blockie.asBase64({size: 44})
// Use the base64Image string as needed, for example, setting it as the src of an img element
document.getElementById('identicon-image').src = base64Image
const publicKey = 'BEDEAD'
const jazz = new Jazzicon({seed: publicKey})
const base64Image = jazz.asBase64({size: 44})
// Use the base64Image string as needed, for example, setting it as the src of an img element
document.getElementById('identicon-image').src = base64Image
asBase64({ seed, size, scale })
Generates a base64 encoded SVG image for the provided seed, the width
and height
are the result of size * scale
Parameters:
seed (string)
: The seed for which to generate the identicon.size (number, optional)
: The size of the identicon grid. Default is 8.scale (number, optional)
: The scale factor for the identicon. Default is 4.Returns:
A base64
encoded string representing the SVG image.
asBase64({ size })
Generates a base64 encoded SVG image for the provided seed, the width
and height
are equals to size
Parameters:
size (number, optional)
: The size of the identicon grid. Default is 100.Returns:
A base64
encoded string representing the SVG image.
FAQs
The package to create wallet identicons of Yoroi SDK
The npm package @yoroi/identicon receives a total of 16 weekly downloads. As such, @yoroi/identicon popularity was classified as not popular.
We found that @yoroi/identicon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.