Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
event-log-harvester
Advanced tools
The Ethereum Event Logs Harvester is a TypeScript utility that simplifies the process of fetching, decoding, and processing event logs from the Ethereum blockchain. It is designed to handle multiple event filters, decode logs according to user-defined schemas, and process the results using customizable callbacks. The utility supports both synchronous and asynchronous decoding, ensuring flexibility and performance in handling large datasets.
getLogs
requests to efficiently handle large ranges of blocks.getLogs
request.getLogs
request fails, the tool retries up to a specified number of times (maxRetries
), with an exponential backoff (1s * retry count
).EventFilter
can have its own callback function, which is invoked after each batch, allowing custom post-processing like database writes, logging, etc.fromBlock
and toBlock
(i.e., logs within [fromBlock, toBlock]
are processed).To install the package, run the following command:
npm install event-log-harvester
## Example
```typescript
FAQs
## Description
We found that event-log-harvester demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.