Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
jingtum-base-lib
Advanced tools
#The Jingtum Base JavaScript Library
Basic function for development, include generate wallet, check secret and check address.
jingtum-base-lib
connects to the Jingtum base lib and runs in Node.js as well as in the browser.
##Getting jingtum-base-lib
Via npm for Node.js
$ npm install jingtum-base-lib
Build from the source using gulp
$ git clone https://github.com/jingtum/jingtum-base-lib.git
$ npm install
$ gulp
Then use the minified dist/jingtum-base-*-min.js
in your webpage
##Quickstart
var Wallet = require('jingtum-base-lib').Wallet;
var wallet1 = Wallet.generate();//get a wallet
var wallet2 = Wallet.fromSecret('saai2npGJD7GKh9xLxARfZXkkc8Bf');//get a wallet by secret
var ret = Wallet.isValidAddress('j98a2BFmVQDSCvQEQEAF9tE8JWpvLqRuUM');// whether the address is valid
var ret = Wallet.isValidSecret('saai2npGJD7GKh9xLxARfZXk kc8Bf');// whether the secret is valid
##Signature verification
var wt = new Wallet('saai2npGJD7GKh9xLxARfZXkkc8Bf');
var pubkey = wt.getPublicKey();
// Sign message can be an array or a hex string
var sdata = "F95EFF5A4127E68D2D86F9847D9B6DE5C679EE7D9F3241EC8EC67F99C4CDA923";
var sign =wt.sign(sdata);
// Signature MUST be either:
// 1) hex-string of DER-encoded signature; or
// 2) DER-encoded signature as buffer; or
// 3) object with two hex-string properties (r and s)
// Verify the signature
if ( wt.verify(sdata, sign) == true)
{
console.log("Verify sjcl signature successfully!");
}else
console.log("Cannot verify sjcl sig");
Check if work in browser env
FAQs
jingtum base lib for wallet and so on.
The npm package jingtum-base-lib receives a total of 22 weekly downloads. As such, jingtum-base-lib popularity was classified as not popular.
We found that jingtum-base-lib demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.