
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
TS library with Cosmos SDK and BadKids smart contracts.
npm install badkidsjs
First, make sure to create a provider for the chain you want to use. You can use the useChain hook from cosmos-kit or pass in address and promises to return the query/signing clients:
import { ContractsProvider } from 'badkidsjs';
import { useChain } from '@cosmos-kit/react';
const ChainContractProvider = ({ chainName, children }: { chainName: string, children: any }) => {
const { address, getCosmWasmClient, getSigningCosmWasmClient } = useChain(chainName);
return (
<ContractsProvider contractsConfig={{
address,
getCosmWasmClient,
getSigningCosmWasmClient
}}>
{children}
</ContractsProvider>
);
};
After you've created your provider, you can leverage the useContracts hook:
import { useContracts } from 'badkidsjs';
import { useChain } from '@cosmos-kit/react';
const ExampleComponent = ({chainName}:{chainName: string}) => {
const {
badKids,
sg721Updatable,
marketplace
} = useContracts();
const { address, status } = useChain(chainName);
if (address && badKids.cosmWasmClient) {
const composer = badKids.getMessageComposer(badKidsAddr)
// do something with composer
console.log(composer);
// do something with a query client
const sg = sg721Updatable.getQueryClient(sg721UpdatableAddr);
sg.allNftInfo({
includeExpired: false,
tokenId: 2
}).then(nftInfo=>{
console.log(nftInfo.info.token_uri);
})
// do something with a signing client
const mrkt = marketplace.getQueryClient(marketplaceAddr);
mrkt.bid({
bidder: 'stars1wvmhlyajmut758w6uvnnrlgc4gx5g8tndffp05',
collection: 'stars19jq6mj84cnt9p7sagjxqf8hxtczwc8wlpuwe4sh62w45aheseues57n420',
tokenId: 2
})
} else if (marketplace.cosmWasmClient) {
const query = marketplace.getQueryClient(marketplaceAddr);
// do something with query client from marketplace
console.log(query);
}
return (
<div>
{address}
</div>
);
}
import { stargaze } from 'badkidsjs';
const main = async () => {
const { createLCDClient } = stargaze.ClientFactory;
const client = await createLCDClient({ restEndpoint: REST_ENDPOINT });
// now you can query the modules
const balance = await client.cosmos.bank.v1beta1
.allBalances({ address: 'stars1addresshere' });
};
All contracts are scoped under the contracts object:
import { contracts } from 'badkidsjs';
const {
SG721Base,
VendingFactory,
VendingMinter,
Whitelist
} = contracts;
Then each contract will have clients, for example for Whitelist:
const {
WhitelistClient,
WhitelistMessageComposer,
WhitelistQueryClient
} = Whitelist;
const queryClient = new WhitelistQueryClient(wasmClient, contractAddress);
const hasStarted = await queryClient.hasStarted()
const members = await queryClient.members({limit: 10})
const client = new WhitelistClient(signingWasmClient, sender, contractAddress);
await client.addMembers({
toAdd: ['name1', 'name2']
})
import { cosmwasm } from "badkidsjs";
const {
clearAdmin,
executeContract,
instantiateContract,
migrateContract,
storeCode,
updateAdmin
} = cosmwasm.wasm.v1.MessageComposer.withTypeUrl;
import { ibc } from 'badkidsjs';
const {
transfer
} = ibc.applications.transfer.v1.MessageComposer.withTypeUrl
import { cosmos } from 'badkidsjs';
const {
fundCommunityPool,
setWithdrawAddress,
withdrawDelegatorReward,
withdrawValidatorCommission
} = cosmos.distribution.v1beta1.MessageComposer.fromPartial;
const {
multiSend,
send
} = cosmos.bank.v1beta1.MessageComposer.fromPartial;
const {
beginRedelegate,
createValidator,
delegate,
editValidator,
undelegate
} = cosmos.staking.v1beta1.MessageComposer.fromPartial;
const {
deposit,
submitProposal,
vote,
voteWeighted
} = cosmos.gov.v1beta1.MessageComposer.fromPartial;
⚡️ For web interfaces, we recommend using cosmos-kit. Continue below to see how to manually construct signers and clients.
Use getSigningPublicawesomeClient to get your SigningStargateClient, with the proto/amino messages full-loaded. No need to manually add amino types, just require and initialize the client:
import { getSigningPublicawesomeClient } from 'badkidsjs';
const stargateClient = await getSigningPublicawesomeClient({
rpcEndpoint,
signer // OfflineSigner
});
To broadcast messages, you can create signers with a variety of options:
We recommend using cosmos-kit for creating signers that work with Keplr and other wallets.
Likely you'll want to use the Amino, so unless you need proto, you should use this one:
import { getOfflineSignerAmino as getOfflineSigner } from 'cosmjs-utils';
import { getOfflineSignerProto as getOfflineSigner } from 'cosmjs-utils';
WARNING: NOT RECOMMENDED TO USE PLAIN-TEXT MNEMONICS. Please take care of your security and use best practices such as AES encryption and/or methods from 12factor applications.
import { chains } from 'chain-registry';
const mnemonic =
'unfold client turtle either pilot stock floor glow toward bullet car science';
const chain = chains.find(({ chain_name }) => chain_name === 'stargaze');
const signer = await getOfflineSigner({
mnemonic,
chain
});
Now that you have your stargateClient, you can broadcast messages:
const { send } = cosmos.bank.v1beta1.MessageComposer.withTypeUrl;
const msg = send({
amount: [
{
denom: 'ustars',
amount: '1000'
}
],
toAddress: address,
fromAddress: address
});
const fee: StdFee = {
amount: [
{
denom: 'ustars',
amount: '864'
}
],
gas: '86364'
};
const response = await stargateClient.signAndBroadcast(address, [msg], fee);
If you want to manually construct a stargate client
import { OfflineSigner, GeneratedType, Registry } from "@cosmjs/proto-signing";
import { AminoTypes, SigningStargateClient } from "@cosmjs/stargate";
import {
cosmosAminoConverters,
cosmosProtoRegistry,
cosmwasmAminoConverters,
cosmwasmProtoRegistry,
ibcProtoRegistry,
ibcAminoConverters,
publicawesomeAminoConverters,
publicawesomeProtoRegistry
} from 'stargazejs';
const signer: OfflineSigner = /* create your signer (see above) */
const rpcEndpint = 'https://rpc.cosmos.directory/stargaze'; // or another URL
const protoRegistry: ReadonlyArray<[string, GeneratedType]> = [
...cosmosProtoRegistry,
...publicawesomeProtoRegistry,
...cosmwasmProtoRegistry,
...ibcProtoRegistry
];
const aminoConverters = {
...cosmosAminoConverters,
...publicawesomeAminoConverters,
...cosmwasmAminoConverters,
...ibcAminoConverters
};
const registry = new Registry(protoRegistry);
const aminoTypes = new AminoTypes(aminoConverters);
const stargateClient = await SigningStargateClient.connectWithSigner(rpcEndpoint, signer, {
registry,
aminoTypes
});
🛠 Built by Cosmology — if you like our tools, please consider delegating to our validator ⚛️
Code built with the help of these related projects:
FAQs
badkids
The npm package badkidsjs receives a total of 0 weekly downloads. As such, badkidsjs popularity was classified as not popular.
We found that badkidsjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.