Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
yarn global add @browseth/cli
browseth-cli create-simple-site <path>
cd <path>
yarn
yarn start
npm install browseth
yarn add browseth
const Browseth = require('browseth');
// or
// import Browseth from 'browseth'
const beth = new Browseth();
distributions
/src/index.ts
wallet
transport
Fetch
APIhttp(s)
XMLHttpRequest
APIWebsocket
APIrpc
This package wraps the transports with a strongly typed API for each of the different clients.
Support:
Supported Method Sets:
admin
db
debug
eth
eth_pubsub
evm
miner
net
parity
parity_accounts
parity_set
personal
pubsub
secretstore
signer
shh
trace
txpool
web3
nodes
apis
These packages are for extending the functionality of ethereum beyond simple wrappers for ethereum-jsonrpc calls. The intention is to be inclusive by supporting these packages as optinoal plug ins.
Supported:
Make the Node transactions event emiters and build out Contract event listening capabilities.
Support More Wallets:
Favor code generated config-based (jsonschema?) rpc.
Phase Out web3-eth-abi
in favor of code generated abi.
Phase Out bignumber.js
in favor of bn.js
to be more in line with the rest
of the community.
For now we'd like to just create issues. You're welcome to fork the code and make pull requests, we are aiming to have a fully featured package built over the summer and will be actively building and maintaining this library going forward.
Since this is a developer pre-release shared with close friends, also feel more than free to reach out directly to myself braden@buyethdomains.com or the team contact@buyethdomains.com.
Thanks for taking a look :-).
FAQs
A library for interacting with ethereum, well suited for the browser.
The npm package browseth receives a total of 3 weekly downloads. As such, browseth popularity was classified as not popular.
We found that browseth demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.