
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
This CLI tool allows users to specify an Ethereum address and a provider RPC URL in order to check their balance with DerivaDEX's on-chain DDX wallet.
This CLI tool allows users to specify an Ethereum address and a provider RPC URL in order to check their balance with DerivaDEX's on-chain DDX wallet.
This command can be installed by running the command:
yarn global add ddx-debug
You can upgrade this command using the command:
yarn global upgrade ddx-debug
Once you've installed the ddx-debug command, you can invoke it on a BASH compliant
command-line. This command will query the state of a trader's account using a
specified user address.
In order for ddx-debug to function properly, a from string and a rpc-url
string must be provided. from specifies the address to use when making the query
to the DerivaDEX contract. rpc-url specifies an Ethereum JSON RPC URL that can
be used to query an Ethereum node. You can use the RPC URL provided by a local
Ethereum node, but it's easy to create a rpc-url by creating an account on
Infura or Alchemy if you aren't
running an Ethereum node.
The parameters to ddx-debug can be provided as command-line options. Make sure
to replace $FROM_ADDRESS and $RPC_URL with the desired from
address and rpc-url before running the command.
ddx-debug --from "$FROM_ADDRESS" --rpc-url "$RPC_URL"
Alternatively, ddx-debug accepts a configuration file with the --config option.
ddx-debug --config "$CONFIG_PATH"
ddx-debug config paths should be formatted as JSON objects and they must contain
from and rpc-url fields.
FAQs
This CLI tool allows users to specify an Ethereum address and a provider RPC URL in order to check their balance with DerivaDEX's on-chain DDX wallet.
We found that ddx-debug demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.