
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
The iExec SDK is a CLI and a JS library that allows easy interactions with iExec decentralized marketplace in order to run off-chain computations.
The iExec javascript SDK can be imported in your frontend or backend JS project.
install
npm install iexec
import
import { IExec } from 'iexec';
Check the documentation
The iExec SDK comes with a command line interface enabling interactions with the decentralized marketplace from a terminal.
install
npm install -g iexec
# check commands
iexec help
Check the documentation
npm ci
npm run codegen
npm run build
Tests run on a local dockerized stack, the test stack must be started prior to running tests
# once before testing
npm run start-test-stack
-After some times the test stack may become desynchronized, run
npm run start-test-stack
to refresh it.
npm run stop-test-stack
will teardown the test stack
Run tests when the stack is up
npm run test
Some tests relies on RPC API providers, to have them running smoothly you can provide the following envs
- ALCHEMY_API_KEY (obtained from https://alchemy.com)
- ETHERSCAN_API_KEY (obtained from https://etherscan.io)
- INFURA_PROJECT_ID (obtained from https://infura.io)
Find changes in the CHANGELOG
FAQs
iExec SDK
We found that iexec demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.