Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
create-lz-app
Advanced tools
Create a production ready Next.js dApp with wallet connection and user balances out of the box. Include minimal configuration for fungible or non-fungible tokens to bootstrap a working bridge within minutes.
To get started with the interactive flow, run the cli tool via npx
, then follow the steps to configure your bridge.
# Create a new project in my-lz-bridge-app directory
npx create-lz-app@latest ./my-lz-bridge-app
# Show all available options
npx create-lz-app --help
Name your project
? What is your project name? › my-lz-bridge-app
Select the type of token you'd like to configure. This version supports OFTs, Wrapped Tokens, and ONFTs from either the 721 or 1155 standard. For any token type you'll need just one contract address and chain pair. The cli tool will get the rest of your token configuration automatically.
? What kind of token would you like to add? › - Use arrow-keys. Return to submit.
❯ Add an OFT token
Add an ONFT token
Add a Wrapped token bridge
I want to start with the default configuration
When finished open your repo in the directory you provided. See the Example Bridge documentation for implementation details and how to further customize your bridge.
cd ./my-lz-bridge-app
FAQs
Create LayerZero dApp with one command
The npm package create-lz-app receives a total of 1 weekly downloads. As such, create-lz-app popularity was classified as not popular.
We found that create-lz-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.