
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
create-fhenix-dapp
Advanced tools
🧪 An open-source, up-to-date toolkit for building decentralized applications (dapps) on the Fhenix blockchain. It's designed to make it easier for developers to create and deploy smart contracts and build user interfaces that interact with those contracts.
⚙️ Built using Scaffold ETH, Next.js, RainbowKit, Hardhat, Wagmi, Viem, Ethers.js, Fhenixjs, and Typescript.
Before you begin, you need to install the following tools:
To get started with Create Fhenix DApp, follow the steps below:
pnpm create fhenix-dapp@latest
pnpm chain:start
This command starts a local Fhenix node using Hardhat and Docker for testing and development.
You can customize the network configuration in packages/backend/hardhat.config.ts
.
pnpm deploy:contracts
Note: The default deployer contract will be automatically funded to be able to deploy to the local node.
The contract can be modified here: packages/backend/contracts
The contract deployment script can be customized here: packages/backend/deploy
pnpm test
pnpm start
Visit your app on: http://localhost:3000
. You can interact with your smart contract using the Debug Contracts
page of the Counter demo on the frontpage.
You can tweak the app config in packages/frontend/scaffold.config.ts
.
pnpm chain:stop
packages/frontend/scaffold.config.ts
.packages/backend/contracts/Counter.sol
packages/frontend/app
packages/backend/deploy
Check out Wiki
Many thanks to Scaffold ETH developers for providing a solid foundation for this project.
FAQs
Create Fhenix DApp
The npm package create-fhenix-dapp receives a total of 1 weekly downloads. As such, create-fhenix-dapp popularity was classified as not popular.
We found that create-fhenix-dapp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.