
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
stellar-sandbox
Advanced tools
This package is a sandbox for working around with stellar.
It contains code to create an anchor, federation server and anchor resolution service.
GET /federation
Resolve Stellar federation addresses
Query params:
Examples:
localhost:3000/federation?q=pac*ngfar.io&type=name
localhost:3000/federation?q=GCR24ALUHA3SMI4W4D7MDSF53BUFHWYYPZZRB44BTC5ZDQPFIR5W4NVM&type=id
localhost:3000/federation?q=pac*ngfar.io&password=mypassword&type=keypair
PUT /federation
Register a federation address. The user that wants to register must sign the request.
An account ID can only have one federation address associated.
Body content:
Headers:
Example
curl -X PUT -H "Content-Type: application/json" -H "signature: i0S/MPl9x9BKWHC46SsxKhz6i1CBLXML1/Tl575VBjhMSCEq67DQMP6NzeZvQh9CfqsU6MIezd5G2Y5q8HzYAw==" -d '{
"account_id": "GCCTVV6FT2ZEB2TMY25GND6S4T2N3IS76F5RK3Z2MXD4IBQKRMZGOV6V",
"federation_address": "roberto*ngfar.io"
}
' "http://localhost:3000/federation"
DELETE /federation
Removes an account from federation server (federation or account ID)
Body content:
Headers:
POST /federation
Creates a stellar account with encrypted seed and register to federation (testnet)
Body content:
PATCH /federation
Patches a stellar account to store its encrypted seed with password in the account data
Body content:
GET /resolution
Resolve anchor address for deposit/withdrawals
Query params:
Deposit to NaoBTC
localhost:3000/federation?type=deposit&issuer=GATEMHCCKCY67ZUCKTROYN24ZYT5GK4EQZ65JJLDHKHRUZI3EUEKMTCH&code=BTC&q=GDG4LKMTODR227EQQXKHAWIOYBLNGXRJEW6TJTNQ766UUGVMFWDGAVT6
Withdraw from Stellereum
localhost:3000/resolution?type=withdraw&issuer=GDIR44J6EE3SVP4OAOAF7FAJGBXIHELRKHGC3RFAYXDE4I73S6ZNNW2F&code=ETH&q=0xde0b295669a9fd93d5f28d9ec85e40f4cb697bae
Info about Stellereum
localhost:3000/resolution?type=info&issuer=GDIR44J6EE3SVP4OAOAF7FAJGBXIHELRKHGC3RFAYXDE4I73S6ZNNW2F&code=ETH
GET /resolution?type=list
Return list of supported anchors
OUTDATED
FAQs
> This package is a sandbox for working around with stellar.
The npm package stellar-sandbox receives a total of 2 weekly downloads. As such, stellar-sandbox popularity was classified as not popular.
We found that stellar-sandbox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.