Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
fireblocks-sdk
Advanced tools
[![npm version](https://badge.fury.io/js/fireblocks-sdk.svg)](https://badge.fury.io/js/fireblocks-sdk)
The current version of the SDK has changed the minimum supported Node.js version from v12 to v16.
Versions older than v16 are no longer maintained by the Node.js community and are considered EOL.
This repository contains the official Javascript & Typescript SDK for Fireblocks API. For the complete API reference, go to API reference.
Please read the following guide for migration.
Make sure you have the credentials for Fireblocks API Services. Otherwise, please contact Fireblocks support for further instructions on how to obtain your API credentials.
npm install fireblocks-sdk --save
or
yarn add fireblocks-sdk
JavaScript:
const FireblocksSDK = require("fireblocks-sdk").FireblocksSDK;
const fireblocks = new FireblocksSDK(privateKey, apiKey);
TypeScript:
import { FireblocksSDK } from "fireblocks-sdk";
const fireblocks = new FireblocksSDK(privateKey, apiKey);
You can also pass additional options:
const baseUrl = "https://api.fireblocks.io";
const authProvider: IAuthProvider = { /* Custom implementation */ };
const fireblocks = new FireblocksSDK(privateKey, apiKey, baseUrl, authProvider, options);
The options
argument has the following structure:
interface SDKOptions {
/** HTTP request timeout */
timeoutInMs?: number;
/** Proxy configurations */
proxy?: AxiosProxyConfig | false;
/** Whether to remove platform from User-Agent header */
anonymousPlatform?: boolean;
/** Additional product identifier to be prepended to the User-Agent header */
userAgent?: string;
/** TravelRule Provider options to initialize PII Client for PII encryption */
travelRuleOptions?: TravelRuleOptions;
}
You can provide the sdk options with an axios response interceptor:
new FireblocksSDK(privateKey, userId, serverAddress, undefined, {
customAxiosOptions: {
interceptors: {
response: {
onFulfilled: (response) => {
console.log(`Request ID: ${response.headers["x-request-id"]}`);
return response;
},
onRejected: (error) => {
console.log(`Request ID: ${error.response.headers["x-request-id"]}`);
throw error;
}
}
}
}
});
The SDK throws AxiosError
upon http errors for API requests.
You can read more about axios error handling here.
You can get more data on the Fireblocks error using the following fields:
error.response.data.code
: The Fireblocks error code, should be provided on support ticketserror.response.data.message
: Explanation of the Fireblocks errorerror.response.headers['x-request-id']
: The request ID correlated to the API request, should be provided on support tickets / Github issuesFAQs
[![npm version](https://badge.fury.io/js/fireblocks-sdk.svg)](https://badge.fury.io/js/fireblocks-sdk)
The npm package fireblocks-sdk receives a total of 22,914 weekly downloads. As such, fireblocks-sdk popularity was classified as popular.
We found that fireblocks-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.