
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
rust-cardano-crypto
Advanced tools
Cardano crypto implemented in Rust and transpiled to WebAssembly
# install rustup
curl https://sh.rustup.rs -sSf | sh
# use nightly version
rustup install nightly
rustup default nightly
# with wasm32 target
rustup target add wasm32-unknown-unknown --toolchain nightly
To Compile the rust crypto to a Web Assembly (WASM) module and build JS library run the ./build
script.
(only necessary if you want to build locally)
There is a simple example application in js-example
that can be run to test some of the features.
within js-example/
folder
npm install
npm run install
within js-example/
run npm run build
open js-example/index.html
in any browser
You can either build the library locally on your machine to test the latest version with your project or install via NPM.
in the root of this repo: npm link
in the root of your project: npm link rust-cardano-crypto
in the root of your project: npm install rust-cardano-crypto
// Import like this:
import CardanoCrypto from 'rust-cardano-crypto'
// Or access as global in browsers:
CardanoCrypto.PaperWallet.scramble(iv, password, input)
The rust code contains rwc/
a fork of rust-crypto
without the dependencies that cannot be build easily in a wasm environment, and minus the
algorithms that are not useful.
FAQs
Cardano crypto implemented in Rust and transpiled to WebAssembly
The npm package rust-cardano-crypto receives a total of 5 weekly downloads. As such, rust-cardano-crypto popularity was classified as not popular.
We found that rust-cardano-crypto demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.