Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Cross-platform code used accross bindings. Binding developers can choose to use some or all the included functionality:
object_store
/schema
/object_schema
/property
- contains the structures and logic used to setup and modify realm files and their schema.shared_realm
- wraps the object_store apis to provide transactions, notifications, realm caching, migrations, and other higher level functionality.object_accessor
/results
/list
- accessor classes, object creation/update pipeline, and helpers for creating platform specific property getters and setters.parser
/query_builder
- cross platform query parser and query builder - requires and object_accessor specialization for argument support. Depends on https://github.com/ColinH/PEGTLThe object store's build system currently only suports building for OS X. The object store itself can build for all Apple platforms when integrated into a binding.
Install CMake. You can download an installer for OS X from the CMake download page, or install via Homebrew:
brew install cmake
Generate build files:
cmake .
Build:
make
If you wish to build against a local version of core you can invoke cmake
like so:
cmake -DREALM_CORE_VERSION=/path/to/realm-core
The given core tree will be built as part of the object store build.
The object store can be built using ASan, TSan and/or UBSan by specifying -DSANITIZE_ADDRESS=1
, -DSANITIZE_THREAD=1
, or -DSANITIZE_UNDEFINED=1
when inoking CMake.
Building with ASan requires specifying a path to core with -DREAM_CORE_VERSION
as core needs to also be built with ASan enabled.
On OS X, the Xcode-provided copy of Clang only comes with ASan, and using TSan or UBSan requires a custom build of Clang.
If you have installed Clang as an external Xcode toolchain (using the install-xcode-toolchain
when building LLVM), note that you'll have to specify -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++
when running cmake
to stop cmake from being too clever.
make run-tests
FAQs
Realm by MongoDB is an offline-first mobile database: an alternative to SQLite and key-value stores
The npm package realm receives a total of 28,930 weekly downloads. As such, realm popularity was classified as popular.
We found that realm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.