
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
oasis-debug
Advanced tools
oasis-debug.js is a simple cli utility to view web3c logs. Although meant to be used in conjunction with contracts using the owasm-debug crate, it can be used more generally to view logs for any web3c contracts with or without confidentiality.
Oasis Debug
Authors:
Oasis Labs Inc. <info@oasislabs.com>
Usage:
oasis-debug [arguments...]
Options:
--help, -h Show help [boolean]
--version, -v Show version number [boolean]
--address, -a Address to stream logs from (defaults to all addresses)[string]
--topics, -t Array of log topics to stream or "all" for any topic (defaults
to [0xff...f]) [array]
--raw, -r Option to emit the raw log data (defaults to false) [boolean]
--json, -j Option to emit the web3.js json object log (defaults to false)
[boolean]
--network, -n Gateway websocket url to connect to a network (defaults to the
Devnet) [string]
By default, runing oasis-debug.js
will try to deserialize all logs from hex strings to human readable utf-8. When provided with the raw
flag, the raw log data, i.e., what is stored on chain, will be printed out.
When viewing logs from confidential contracts, oasis-debug
will only have access to the encryption keys of the .web3c
database in the directory within which it is run. When receiving an encrypted log for which it doesn't have keys to decrypt, it will print out the encrypted data.
FAQs
Cli for streaming web3 logs
The npm package oasis-debug receives a total of 0 weekly downloads. As such, oasis-debug popularity was classified as not popular.
We found that oasis-debug demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.