Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
npm -g i daf-cli
Usage: daf [options] [command]
Options:
-h, --help output usage information
Commands:
identity-manager [options] Manage identities
resolve <did> Resolve DID Document
credential [options] Create W3C Verifiable Credential
presentation [options] Create W3C Verifiable Presentation
listen [options] Receive new messages and listen for new ones
data-explorer [options] Explore data store
graphql [options] GraphQL server
sdr [options] Create Selective Disclosure Request
msg <raw> Handle raw message (JWT)
Send:
DAF_TG_URI=https://custom-tge.eu.ngrok.io/graphql daf credential -s
Receive:
DEBUG=* DAF_TG_URI=https://custom-tge.eu.ngrok.io/graphql DAF_TG_WSURI=wss://custom-tge.eu.ngrok.io/graphql daf listen
Internal resolver (did-resolver
)
daf resolve did:web:uport.me
Universal resolver
DAF_UNIVERSAL_RESOLVER_URL=https://uniresolver.io/1.0/identifiers/ daf resolve did:github:gjgd
ENV | Default | Description |
---|---|---|
DEBUG | undefined | Use * to see all debug info. More options |
DAF_IDENTITY_STORE | ~/.daf/identity-store.json | Identity keyPair storage |
DAF_DATA_STORE | ~/.daf/data-store.sqlite3 | Sqlite3 database containing messages, credentials, presentations, etc. |
DAF_INFURA_ID | 5ffc47f65c4042ce847ef66a3fa70d4c | Used for calls to the Ethereum blockchain |
DAF_UNIVERSAL_RESOLVER_URL | undefined | Example https://uniresolver.io/1.0/identifiers/ . If not provided - will use internal resolver |
DAF_TG_URI | https://edge.uport.me/graphql | Trust Graph Endpoint URL |
DAF_TG_WSURI | undefined | Trust Graph Endpoint WebSocket URL |
FAQs
DAF command line application.
The npm package daf-cli receives a total of 1 weekly downloads. As such, daf-cli popularity was classified as not popular.
We found that daf-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.