Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Demux Action Reader implementations to read block and action data from EOSIO-based blockchains.
# Using yarn
yarn add demux-eos
# Using npm
npm install demux-eos --save
This library provides three Action Reader implementations for reading from EOSIO blockchains: NodeosActionReader
, MongoActionReader
, and StateHistoryPostgresActionReader
. It is currently recomended to use the MongoActionReader
due to performance and the ability to read inline and deferred actions.
Reads from a node's attached MongoDB instance when configured to use the MonogoDB Plugin.
To use the MongoActionReader
, you must first make sure that your environment is properly configured, as it otherwise may yield unpredictable or incorrect results. To set up a proper environment, make sure the following are true:
p2p-peer-address
configurationread-mode
configuration set to read-only
mongodb-update-via-block-num
configuration enabledThis means that in a development environment, you will need to set up at least two Nodeos instances: one to produce blocks, and a peer with the MongoDB plugin activated to populate the attached MongoDB.
For performance, the following settings are also recommended:
block_states
and action_traces
, we can save space by not indexing any of the other collections via setting the following options to false
:
mongodb-store-blocks
mongodb-store-transactions
mongodb-store-transaction-traces
mongodb-filter-out
option to isolate which accounts/actions you are indexing to only the actions you are listening for in your Action Handler. This will further reduce space requirements, and may give a performance boost via faster queries and less data for the Action Handler to process. For more information on how to filter, see the MongoDB Plugin documentation.Unlike the NodeosActionReader
, inline and deferred actions are able to be captured and passed on to the Action Handler. Additionally, each Action has a notifiedAccounts
property that lists all accounts notified of the blockchain action (this information is also not available via the NodeosActionReader
).
const { BaseActionWatcher } = require("demux")
const { MongoActionReader } = require("demux-eos")
// See supported Action Handlers here: https://github.com/EOSIO/demux-js#class-implementations
const actionHandler = ...
const actionReader = new MongoActionReader({
startAtBlock: 1234, // startAtBlock: the first block relevant to our application
onlyIrreversible: false, // onlyIrreversible: whether or not to only process irreversible blocks
dbName: "EOS", // name of the database
mongoEndpoint: "mongo://...", // mongoEndpoint: the url of the mongodb instance
})
const actionWatcher = new BaseActionWatcher(actionReader, actionHander, 500)
// This must be done before calling watch so the MongoDB connection can be made
actionReader.initialize().then(() =>
actionWatcher.watch()
)
Reads from a Postgres instance when nodeos is configured to use the State History Plugin as well as the fill-postgresql tool.
To use the StateHistoryPostgresActionReader
, you must first make sure that your environment is properly configured, as it otherwise may yield unpredictable or incorrect results. To set up a proper environment, make sure the following are true:
You are running a producing node.
You are running a second node with the state history plugin enabled.
p2p-peer-address
configuration--disable-replay-opts
set via CLI.--plugin eosio::state_history_plugin
set via CLI.--trace-history
set via CLI.--chain-state-history
set via CLI.--state-history-endpoint \"0.0.0.0:<preferred_port>\"
set via CLI.You are running fill-postgresql.
--endpoint=<ip_of_above_node:port_specified>
set via CLI.--schema=<preferred_schema>
set via CLI.--drop
set via CLI. This will cleanup any existing tables.--create
set via CLI. This will create the schema/tables as needed.This means that in a development environment, you will need to set up at least two Nodeos instances: one to produce blocks, and a peer with the State History plugin activated to populate the Postgresql instance.
Unlike the NodeosActionReader
, inline and deferred actions are able to be captured and passed on to the Action Handler. Additionally, each Action has a notifiedAccounts
property that lists all accounts notified of the blockchain action (this information is also not available via the NodeosActionReader
).
const { BaseActionWatcher } = require("demux")
const { StateHistoryPostgresActionReader } = require("demux-eos")
// See supported Action Handlers here: https://github.com/EOSIO/demux-js#class-implementations
const actionHandler = ...
const massiveConfig = {
host: 'localhost',
port: 5432,
database: 'chain',
user: 'postgres',
password: 'postgres'
}
const actionReader = new StateHistoryPostgresActionReader({
startAtBlock: 1234, // startAtBlock: the first block relevant to our application
onlyIrreversible: false, // onlyIrreversible: whether or not to only process irreversible blocks
dbSchema: "chain", // name of the database
massiveConfig, // provides config to internal massivejs instance.
})
const actionWatcher = new BaseActionWatcher(actionReader, actionHander, 500)
// This must be done before calling watch so the MongoDB connection can be made
actionReader.initialize().then(() =>
actionWatcher.watch()
)
Makes requests directly to a specified Nodeos API endpoint to obtain block data.
All that is required is a running Nodeos instance that has the chain_api_plugin
enabled.
const { BaseActionWatcher } = require("demux")
const { NodeosActionReader } = require("demux-eos")
// See supported Action Handlers here: https://github.com/EOSIO/demux-js#class-implementations
const actionHandler = ...
const actionReader = new NodeosActionReader({
startAtBlock: 1234, // startAtBlock: the first block relevant to our application
onlyIrreversible: false, // onlyIrreversible: whether or not to only process irreversible blocks
nodeosEndpoint: "http://...", // mongoEndpoint: the url of the Nodeos API
})
const actionWatcher = new BaseActionWatcher(actionReader, actionHander, 500)
actionWatcher.watch()
FAQs
Demux-js Action Reader implementations for EOSIO blockchains
We found that demux-eos demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.