
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
contract-map-data
Advanced tools
A mapping of checksummed contract addresses to metadata, like names, and images of their logos.
You can install from npm with npm install @getsafle/contract-map-data and use it in your code like this:
const tokenContracts = require('../token-contract-map/src/index');
const getChainDetails = async (chain) => {
const contracts = tokenContracts[chain].CONTRACT_MAP;
const SINGLE_CALL_BALANCES_ADDRESS = tokenContracts[chain].SINGLE_CALL_BALANCES_ADDRESS
return { contracts, SINGLE_CALL_BALANCES_ADDRESS };
}
Maintaining this list is a considerable chore, and it is not our highest priority. We do not guarantee inclusion in this list on any urgent timeline. We are actively looking for fair and safe ways to maintain a list like this in a decentralized way, because maintaining it is a large and security-delicate task.
/src/contract-map/[chain].json file with the specified address as the key, and the name, logo, tokenStandard, symbol and decimals as the value.Criteria:
A sample submission:
"0x7ceb23fd6bc0add59e62ac25578270cff1b9f619": {
"name": "Wrapped Ether",
"logo": "https://wallet-asset.matic.network/img/tokens/eth.svg",
"erc20": true,
"symbol": "WETH",
"decimals": 18
},
Tokens should include a field "erc20": true, or "erc721": true and can include additional fields:
FAQs
Getsafle token contract metadata
We found that contract-map-data demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.