
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
version feed for trusted application delivery
appfeed generate
Generate a keypair for signing application releases.
appfeed id
Print the public key.
appfeed versions
Print a list of versions with their hashes.
appfeed trusted
appfeed trusted REF
Print a list of currently trusted nodes or if a version or hash REF
is given, print the list of trusted nodes for REF.
appfeed trust ID
Trust ID.
appfeed revoke ID
Revoke trust in ID.
appfeed show REF
Print the contents of REF, a version or hash.
appfeed publish --version=VERSION
Publish data from stdin as VERSION.
appfeed replicate
Replicate using stdin and stdout.
OPTIONS are:
--dir -d Where to save the appfeed data
--keyfile -k Use this keyfile. Default: ~/.config/appfeed/keys.json
var appfeed = require('appfeed')
Instantiate a feed from a leveldb handle db
,
a sodium implementation,
and opts
:
opts.secretKey
- sodium private keyopts.publicKey
- sodium public keyopts.store
- abstract-blob-store
implementation to store blobsReturn a duplex stream to replicate with another appfeed.
opts.blobs
- when false
, only replicate metadata, not blobsopts.heads
- when true
, only pull down the latest version of blobs
to save bandwidthReturn a writable stream wstream
to publish content for doc
:
doc.version
- the version to publish this payload as.cb(err, doc)
fires with the doc.key
of this release.
Add trust for id
.
Revoke trust in id
.
Get an array of ids
in cb(err, ids)
which are trusted at from
, or the
latest update if from
is null
.
npm install -g appfeed
npm install appfeed
Thanks to blockai for sponsoring this project.
MIT
FAQs
version feed for trusted application delivery
We found that appfeed demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.