
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
rownd-package
Advanced tools
The Rownd Data Platform makes data privacy fast and easy. Prior to using the package, you must get an API key and secret from https://app.rownd.io.
Rownd - JavaScript client for rownd
The Rownd Data Platform API is easy and fast to use. Prior to using the API, you must register an app on the Rownd platform (www.app.rownd.io), retrieve an App Key and Secret, and map personal data-types.
This SDK is automatically generated by the Swagger Codegen project:
To publish the library as a npm, please follow the procedure in "Publishing npm packages".
Then install it via:
npm install rownd-package --save
If the library is hosted at a git repository, e.g. https://github.com/GIT_USER_ID/GIT_REPO_ID then install it via:
npm install GIT_USER_ID/GIT_REPO_ID --save
The library also works in the browser environment via npm and browserify. After following
the above steps with Node.js and installing browserify with npm install -g browserify
,
perform the following (assuming main.js is your entry file):
browserify main.js > bundle.js
Then include bundle.js in the HTML pages.
Using Webpack you may encounter the following error: "Module not found: Error: Cannot resolve module", most certainly you should disable AMD loader. Add/merge the following section to your webpack config:
module: {
rules: [
{
parser: {
amd: false
}
}
]
}
Please follow the installation instruction and execute the following JS code:
var Rownd = require('rownd-package');
var defaultClient = Rownd.ApiClient.instance;
// Configure API key authorization: appKey
var appKey = defaultClient.authentications['appKey'];
appKey.apiKey = "YOUR API KEY"
// Uncomment the following line to set a prefix for the API key, e.g. "Token" (defaults to null)
//appKey.apiKeyPrefix['x-rownd-app-key'] = "Token"
// Configure API key authorization: appSecret
var appSecret = defaultClient.authentications['appSecret'];
appSecret.apiKey = "YOUR API KEY"
// Uncomment the following line to set a prefix for the API key, e.g. "Token" (defaults to null)
//appSecret.apiKeyPrefix['x-rownd-app-secret'] = "Token"
var api = new Rownd.AddUserDataApi()
var app = "app_example"; // {String}
var user = "user_example"; // {String}
var opts = {
'body': new Rownd.AppUserData() // {AppUserData}
};
var callback = function(error, data, response) {
if (error) {
console.error(error);
} else {
console.log('API called successfully. Returned data: ' + data);
}
};
api.applicationUserDataUpsert(app, user, opts, callback);
All URIs are relative to https://api.rownd.io
Class | Method | HTTP request | Description |
---|---|---|---|
Rownd.AddUserDataApi | applicationUserDataUpsert | PUT /applications/{app}/users/{user}/data | |
Rownd.ApplicationsApi | applicationList | GET /accounts/{account}/applications | |
Rownd.DeleteUserDataApi | applicationUserDataDelete | DELETE /applications/{app}/users/{user}/data | |
Rownd.GetUserDataApi | applicationUserDataGet | GET /applications/{app}/users/{user}/data | |
Rownd.GetUserDataApi | applicationUserDataList | GET /applications/{app}/users/data |
FAQs
The Rownd Data Platform makes data privacy fast and easy. Prior to using the package, you must get an API key and secret from https://app.rownd.io.
The npm package rownd-package receives a total of 2 weekly downloads. As such, rownd-package popularity was classified as not popular.
We found that rownd-package demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.