
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
socket-bridge-plugin
Advanced tools
Bridge aggregator widget powered by socket
import npm package by npm i socket-bridge-plugin
Add import Bridge from "socket-bridge-plugin"; in project
<Bridge
accountAdd={accountAdd}
provider={provider}
signer={signer}
fromChainId="10" // optional
toChainId="137" // optional
fromChainTokenAddress="0x7f5c764cbc14f9669b88837ca1490cca17c31607" //optional
toChainTokenAddress="0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee" //optional
isToChainFixed={true} //optional
toChainTokenList={[ //optional
"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48", //usdc
"0xdac17f958d2ee523a2206206994597c13d831ec7", //usdt
"0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee", //eth
"0x6b175474e89094c44da98b954eedeac495271d0f", //dai
]}
onClose={this.closeModal}
isDarkMode={isDarkMode}
></Bridge>```
Bridge properties/requirements for integration:
fromChainId and toChainId allow setting default sending and receiving chain.fromChainTokenAddress and toChainTokenAddress can be passed. Default is usdc.isToChainFixed allows to fix receiving chain. When this is enabled, swap chain will not work.toChainTokenList. This will allow only the passed tokens to be selected on receiving chain.REACT_APP_SOCKET_API_KEY=<socket-api-key>FAQs
Bridge aggregator widget powered by socket
The npm package socket-bridge-plugin receives a total of 4 weekly downloads. As such, socket-bridge-plugin popularity was classified as not popular.
We found that socket-bridge-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.