Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
blackjack-utils
Advanced tools
These CLI tools are designed to ease working on Blackjack related projects. They should arm anyone unfamiliar with a typical Blackjack project with the necessary tools to run and contribute to such projects.
Once installed, you can be able to start a new component from scratch and run that component in isolation on a server. You can also perform additional tasks such as lint the codebase, or run unit tests.
Sadly due to odd NPM dependency issues (which will be fixed by us in future versions of the tools), you need to clone the tools and follow a few install steps. In the future we'll get this down to a npm install -g sky-uk/blackjack-tools
.
Firstly, clone the repository somewhere on your machine:
git clone git@github.com:sky-uk/blackjack-tools.git
Then run an NPM install:
cd blackjack-tools
npm install
Wait roughly 5 years.
Finally, you need to add the ./bin
directory to your path. To do this, get your current working directory, and append /bin
to it. Then add it to your path:
pwd # Returns something like /Users/joshnesbitt/Code/blackjack-tools
export PATH="$PATH:/Users/joshnesbitt/Code/blackjack-tools/bin"
You'll probably want to save the export in your bash profile.
Now you should be able to use the tools anywhere on your system:
blackjack --help
The target application you're running tests on should have the following babel packages installed:
Note: we're working on ensuring these dependencies are managed outside of the application.
For more information on the supported commands, run blackjack --help
.
Commands are currently being developed, the status of them is defined below.
No pending commands right now.
Contribution guidelines are shared with the main project, please see the CONTRIBUTING.md there.
We keep a list of features and bugs in the issue tracker.
FAQs
A Blackjack Util Toolkit Available at the CLI
We found that blackjack-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.