
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
[](https://github.com/estarriolvetch/ERC721Psi/actions/workflows/node.js.yml) [
ERC721Psi ("Adventurer", "ADVENTURER"){
}
function mint(uint256 quantity) external payable {
// _safeMint's second argument now takes in a quantity, not a tokenId. (same as ERC721A)
_safeMint(msg.sender, quantity);
}
}
The random seed extensions provide an easy way for NFT projects to create on-chain randomized metata at the individual token level. The random seed extensions uses Chainlink's VRF V2 as its source of randomness. Each token comes with its own unique seed that can be used to derived its attributes.
interface IERC721RandomSeed {
function seed(uint256 tokenId) external view returns (uint256);
}
There are two types of random seed extensions with different schemes of requesting randomness.
ERC721PsiRandomSeed: The randomness is requested during minting. There is no extra actions required for the project owner to reveal the token. The random seeds of the tokens will be revealed when the randomness request is fulfilled by the Chainlink nodes.ERC721PsiRandomSeedReveal: The randomness is requested when the _reveal() function is called. This function is usually called by the project owner to reveal the tokens. Everytime _reveal() is called, it will reveal the random seeds of all the tokens minted since the last reveal.It is important to realize that balanceOf, totalSupply, tokenByIndex, and tokenOfOwnerByIndex in ERC721Psi are not designed to be gas efficient since they are mostly used by front end only. By doing so, we are able to reduce the storage usage and thus minimize the gas consumption for the rest of the functions.
If tracking balanceOf on-chain is important for your application, please use the ERC721PsiAddressData extension.
PRs on documentations, test cases, and any contract improvemetns are welcomed!!
If your projects use ERC721Psi, we'd like know more about it! Feel free to DM 0xEstarriol to share your project.
FAQs
[](https://github.com/estarriolvetch/ERC721Psi/actions/workflows/node.js.yml) [
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.