
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
hardhat-etherscan-abi
Advanced tools
Hardhat plugin that fetches verified contract ABI from Etherscan.
This plugin adds extra features on top of @nomiclabs/hardhat-ethers and allows creating contract instances without
manually downloading ABI: ethers.getVerifiedContractAt('<address>'). It supports Mainnet, BSC, and most testnets.
npm install --save-dev hardhat-etherscan-abi
And add the following statement to your hardhat.config.js:
require("hardhat-etherscan-abi");
Or, if you are using TypeScript, add this to your hardhat.config.ts:
import "hardhat-etherscan-abi";
This plugin creates no additional tasks.
This object has adds some extra hardhat-etherscan-abi specific functionalities by adding new extra fields to hre.ethers
These helpers are added to the ethers object:
export async function getVerifiedContractAt(
hre: HardhatRuntimeEnvironment,
address: string,
signer?: ethers.Signer
): Promise<ethers.Contract>;
You need to add the following Etherscan config to your hardhat.config.js file. Etherscan API key is optional but without it Etherscan allows only 1 request per 5 seconds.
module.exports = {
networks: {
mainnet: { ... }
},
etherscan: {
// Your API key for Etherscan
// Obtain one at https://etherscan.io/
apiKey: "YOUR_ETHERSCAN_API_KEY"
}
};
Then use the function:
const contract = await hre.ethers.getVerifiedContractAt('<address>');
It requires only contract address and will fetch the ABI for the contract automatically from Etherscan
FAQs
Hardhat plugin fetching contract ABI from etherscan
The npm package hardhat-etherscan-abi receives a total of 94 weekly downloads. As such, hardhat-etherscan-abi popularity was classified as not popular.
We found that hardhat-etherscan-abi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.