
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Web3 Wallet SDK - Using AA (ERC-4337) and WebAuthn (PassKeys).
Few important notes:
username - unique stringusername has its own unique account addressPasskeys are used for authentication.username is connected to the specific Passkey. The user who owns the Passkey, owns the account.username.Base SepoliaChrome, BraveUsing Alchemy paymaster and bundler:
import { IchigoSDK } from "ichigo-sdk";
/**
* You can get RPC URL and PolicyID from Alchemy Dashboard:
* https://dashboard.alchemy.com/apps
* https://dashboard.alchemy.com/gas-manager
*/
const RPC_URL =
"https://base-sepolia.g.alchemy.com/v2/JOMsB_RG7ymuGmGM1NqlFRXuwYJ1E1Yh";
const POLICY_ID = "ae7829c6-25de-4150-9cc8-274d53bf209a";
export const sdk = new IchigoSDK({
rpc: RPC_URL,
paymaster: {
type: "ALCHEMY",
policyId: POLICY_ID,
rpc: RPC_URL,
},
});
Mint NFT (ERC721):
await sdk.mint({
type: "ERC721",
contractAddress: "0x10bb2Ee7761C2356F7D7e42311b0fDf8e5e4dCA1",
username: "user_unique_username", // passkey will be attached to the username
});
Mint ERC20:
await sdk.mint({
type: "ERC20",
contractAddress: "0x72788aAd0e291cDC498dd814dE76c34ae2d46a39",
username: "user_unique_username",
});
Transfer NFT (ERC721):
await sdk.transfer({
type: "ERC721",
contractAddress: "0x10bb2Ee7761C2356F7D7e42311b0fDf8e5e4dCA1",
toAddress: "0x91D76D31080ca88339a4E506aFfB4dED4b192bCb",
id: 117,
username: "user_unique_username",
});
Transfer ERC20:
await sdk.transfer({
type: "ERC20",
contractAddress: "0x10bb2Ee7761C2356F7D7e42311b0fDf8e5e4dCA1",
toAddress: "0x91D76D31080ca88339a4E506aFfB4dED4b192bCb",
count: 7,
username: "user_unique_username",
});
Low-level api to implement any smart contract call(s) into a single transaction:
const toAddress = "0x91D76D31080ca88339a4E506aFfB4dED4b192bCb";
const count = 7;
await sdk.batchCall(
[
{
contractAddress: "0x10bb2Ee7761C2356F7D7e42311b0fDf8e5e4dCA1",
fnName: "transfer",
args: () => [toAddress, count], // function arguments
abi: [/* ABI goes here */],
},
],
{
username: "user_unique_username",
}
);
You can always get the wallet address of any username. It will not do any operation on-chain.
const walletAddress = await sdk.getWalletAddress("user_unique_username");
FAQs
Web3 Wallet SDK - Using AA (ERC-4337) and WebAuthn (PassKeys).
The npm package ichigo-sdk receives a total of 2 weekly downloads. As such, ichigo-sdk popularity was classified as not popular.
We found that ichigo-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.