
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
splinterlands-hive-keychain
Advanced tools
Small library to use Hive Keychain with Typescript
Small library to use Hive Keychain with Typescript
import {Keychain} from 'splinterlands-hive-keychain'
const main = async () => {
const keychain = new Keychain(window)
/**
* Initially keychain.status is 'none'
* You can either run the function below manually (make sure extension has be loaded within the website, could take a second or so)
* Or it will be run when you run keychain.call, keychain.requestSignBuffer, etc.
*
* Explanation:
* none => not installed
* installed => installed but not enabled
* enabled => ready to go
*/
await keychain.initialize()
const result = await keychain.requestSignBuffer({
// account: 'therealwolf', // optional - if not set, user can choose
role: 'Posting',
message: 'Super secret message',
title: 'Please sign this message so we can authenticate your account',
})
if (result.status === 'cancel') {
console.log(
'User cancelled the request. You can ignore this and just start over.',
)
return
} else if (result.status === 'error') {
console.log('There was an error')
if (result.keychainStatus === 'none') {
console.log(`User has not installed Keychain or hasn't used it before.`)
} else if (result.keychainStatus === 'installed') {
console.log(
`User has installed Keychain and used it before, but it seems to be disabled for this website. Remind user to enable again.`,
)
} else {
console.log(`Message: ${result.message}`, result.data)
}
return
} else {
console.log('Success!', result.data)
}
const result2 = await keychain.requestTransfer({
to: 'splinterlands',
amount: 5.12,
asset: 'HIVE',
memo: 'test',
enforce: false,
})
console.log(result2)
}
main()
FAQs
Small library to use Hive Keychain with Typescript
The npm package splinterlands-hive-keychain receives a total of 0 weekly downloads. As such, splinterlands-hive-keychain popularity was classified as not popular.
We found that splinterlands-hive-keychain demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.