
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
轻芒小程序公用代码库。
npm run dev
- 开发时生成未压缩的代码到 lib 中npm run build
- 生成生产环境需要的代码到 lib 中npm run test
- 针对 lib 中的代码进行测试npm run test:watch
- 监听 test 目录改动,自动执行测试此项目中的 Util 只会放一些最常用的函数,核心是 Service 部分,其中包括:
import {
configUpdater, authAPI, userStore,
logger, errorReporter, savePhotoToAlbum
} from 'qm-mp'
// 第一步,更新 Config
configUpdater({
name: 'test',
wxAppId: 'xxxxxx'
})
// 第二步,用户授权
// 默认授权页面为 `pages/account/auth`
page({
async handleLoginButtonTap () {
...
await authAPI.loginViaWeChat()
...
}
})
// 第三步,通过 Page Mixin 绑定用户数据
Page({
userSubscription
data: {
userInfo: null
},
onShow () {
this.userSubscription = userStore.subscribe(state => {
this.setData('userInfo', state.userInfo)
})
},
onHide () {
if (this.userSubscription) {
this.userSubscription.unsubscribe()
this.userSubscription = null
}
}
})
// 其他使用:Logger, Util, API...
logger.logAction('render')
errorReporter('输入具体报错信息')
savePhotoToAlbum(imageUrl)
QM-MP 被真实项目 Haha-Meme-MP 引用,可以通过查看项目源代码了解如何使用 QM-MP。
FAQs
We found that qm-mp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.