Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ripplewarpwallet
Advanced tools
Open Source JavaScript Client-Side Ripple Wallet Generator Using scrypt
A ripple brain wallet generator that uses scrypt.
For basic use, navigate to https://termhn.github.io/ripplewarpwallet, which is the compiled, hosted version of the latest stable version in this GitHub repo. Deterministic (verifiable) builds are implemented, and it is automatically deployed and hosted on GitHub pages, so you can be sure that the code here is really the same code that is compiled and used on the web version. In order to do verify this yourself, see the How to Verify section below.
Add to your dependencies with the usual
yarn add ripplewarpwallet
Then use like so:
const warp = require('ripplewarpwallet');
const params = {
passphrase : 'testpassword',
salt : 'testsalt',
progress_hook : progress_output => {/*do something*/}
};
function callback(res) {
const address = res.address;
const secret = res.secret;
console.log("Address: " + address + " Secret: " + secret);
}
warp(params, callback);
In order to build RippleWarpWallet yourself, you'll first need to install git and yarn.
Now, type the following into the window that opens, pressing enter or return after each line
git clone https://github.com/termhn/ripplewarpwallet
cd ripplewarpwallet
This downloads the latest version of the source code from this repository onto your system and then puts you in that folder. Next we will install all the dependencies using yarn. Type:
yarn install
This has installed all the dependencies necessary to build the final page. Now we need to delete the prebuilt version. Navigate to the dist
folder and delete warp_latest.html
and warp_1.0.3_SHA256_{numbers here}.html
files and delete them. We can then build it using
yarn build
Now, the latest version should be installed at dist/warp_1.0.3_SHA256_{numbers here}.html
. You can also access it by clicking on the symbolic link dist/warp_latest.html
. To find this in Windows Explorer, navigate to C:\Users\<Username>\ripplewarpwallet\dist
directory.
Coming soon, you can probably adapt the Windows instructions if you know what you're doing. If you want to do this and you aren't sure how, send me a message or issue and I'll walk you through the process.
Coming soon, you can probably adapt the Windows instructions if you know what you're doing. If you want to do this and you aren't sure how, send me a message or issue and I'll walk you through the process.
In order to verify that the version available online is the same as what is generated directly by the source code in this repository, you can follow these steps:
ripplewarpwallet/dist/warp_1.0.3_SHA256_{numbers}.html
file you built yourself earlier and repeat the same process of rightclick -> view source -> ctrl+A ctrl+C then paste it into the other side of the diff toolRipple uses yarn to manage its dependencies. Run
$ yarn install
to install the needed dependencies.
$ yarn build
to build once, or
$ yarn start
to watch for changes and re-build during development.
FAQs
Open Source JavaScript Client-Side Ripple Wallet Generator Using scrypt
We found that ripplewarpwallet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.