Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
dd-tool-package
Advanced tools
This is the TS CLI implementation of a tool that would allow to replicate a sequence of TXs
To share DD (e.g. How many emissions this week?)
To share POCs (e.g. How do I repro a potential attack?)
Check /task/steps.json
This is an example of how to get started
The globalLoop would receive a DDSequence
to execute
Input and Output mappings are available to create variables
Variables can be concrete
or a stateMapping
Concrete is a real value (e.g your address)
StateMapping is a mapping to the GlobalState
With this system you can store intermediary results or pass hardcoded values
Ganache offers Storage Rewrite and ETH Minting
Some global options in AdditionalSettings
allow to use them (MOSTLY TODO)
theGlobalLoop
is the entire global logic
executeOne
is the function that uses ganache, hidden away as it's a low level implementation
Ganache expects ExecutableContract
s these are the low level version used internally and returns string/bytes as responses
This means the "Low level" / execution is at the lowest level
The interpretation happens in the loop
Understand theLoop
and the types
Once you read these, everything should be more clear
Looking for help with tests
Help in writing the ERC20 Cheats
See TODO for more or reach out on twitter
FAQs
Uses Ganache to Fork the chain and run operations
The npm package dd-tool-package receives a total of 0 weekly downloads. As such, dd-tool-package popularity was classified as not popular.
We found that dd-tool-package demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.